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The course is intended to be introductory. That means no prior knowledge of proof nets is required. However, 
the student should be familiar with the basics of propositional logic, and should have seen formal proofs in some 
formal deductive system (e.g., sequent calculus, natural deduction, resolution, tableaux, calculus of structures, 
Frege-Hilbert-systems, etc.). It is probably helpful if the student knows already what cut elimination is, but 
this is not strictly necessary. 

In these notes, I will introduce the concept of "proof nets" from the viewpoint of the problem of the identity 
of proofs. I will proceed in a rather informal way. The focus will be more on presenting ideas than on presenting 
technical details. The goal of the course is to give the student an overview of the theory of proof nets and make 
the vast amount of literature on the topic easier accessible to the beginner. 

For introducing the basic concepts of the theory, I will in the first part of the course stick to the unit-free 
multiplicative fragment of linear logic because of its rather simple notion of proof nets. In the second part of 
the course we will see proof nets for more sophisticated logics. 

This is a basic introduction into proof nets from the perspective of the identity of proofs. We discuss how 
deductive proofs can be translated into proof nets and what a correctness criterion is. 
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1 Introduction 

1.1 The problem of the identity of proofs 

Whenever we study mathematical objects within a certain mathematical theory, we normally know when two of 
these objects are considered to be the same, i.e., are indistinguishable within the theory. For example in group 
theory two groups are indistinguishable if they are isomorphic, in topology two spaces are considered the same 
if they are homeomorphic, and in graph theory we have the notion of graph isomorphism. However, in proof 
theory the situation is different. Although we are able to manipulate and transform proofs in various ways, 
we have no satisfactory notion telling us when two proofs are the same, in the sense that they use the same 
argument. The main reason is the lack of understanding of the essence of a proof, which in turn is caused by the 
bureaucracy involved in the syntactic presentation of proofs. It is therefore essential to find new presentations 
of proofs that are "syntax-free" , in the sense that they avoid "unnecessary bureaucracy" . 

Finding such presentations is, of course, of utter importance for logic and proof theory in its own sake. We 
can only speak of a real theory of proofs, if we are able to identify its objects. Apart from that, the problem 
is of relevance not only for philosophy and mathematics, but also for computer science, because many logical 
systems permit a close correspondence between proofs and programs. In the view of this so-called Curry-Howard 
correspondence, the question of the identity of proofs becomes the question of the identity of programs, i.e., 
when are two programs just different presentations of the same algorithm. In other words, the fundamental 
proof theoretical question on the nature of proofs is closely related to the fundamental question on the nature 
of algorithms. In both cases the problem is finding the right presentation that is able to avoid unnecessary 
syntactic bureaucracy. 
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1.2 Historical overview 

Interestingly, the problem of the identity of proofs can be considered older than proof theory itself. Already in 
1900, when Hilbert was preparing his celebrated lecture, he considered to add a 24th problem, asking to develop 
a theory ofproofs that allows to compare proofs and provide criteria for judging which is the simplest proof of 
a theorem^] But only in the early 1920s, when Hilbert launched his famous program to give a formalization of 
mathematics in an axiomatic form, together with a proof that this axiomatization is consistent, formal proof 
theory as we know it today came into existence. 

It was Godel [G6d31j, who first considered formal proofs as first-class citizens of the logical world, by 
assigning a unique number to each of them. Even though this work destroyed Hilbert's program, the idea of 
treating proofs as mathematical objects — in the very same way as it is done with formulas — led eventually to our 
modern understanding of formal proofs. Only a few years later, Gentzen ( len.'i 11 provided the first structural 
analysis of formal proofs and introduced methods of transforming them. His concept of cut elimination is still 
the most central target of investigation in structural proof theory. But even after Gentzen's work, the natural 
question of asking for a notion of identity between proofs seemed silly because there are only two trivial answers: 
two proofs are the same if they prove the same formula, or, two proofs are the same if they are syntactically 
equal. 

In [Pra71j , Prawitz proposed the notion of normalization in natural deduction for determining the identity of 
proofs: two proofs are the same (in the sense that they stand for the same argument) if and only if they have the 
same normal form. The normalization process in natural deduction corresponds to Gentzen's cut elimination in 
the sequent calculus: All auxiliary lemmas are removed from the proof, which then uses only material that does 
already appear in the formula to be proved. However, normalization does not respect any complexity issues 
because it is hyper-exponential. This means in particular that all so-called speed-up theorems are ignored. In 
fact, it can happen that a proof with cuts that fits a page is identified with a cut-free proof that exhausts the 
size of the universe [Boo84 . Furthermore, it is probably quite difficult to convince a working mathematician of 
the idea that a cunningly short proof using three clever lemmas should be the same as an extraordinarily long 
proof that does not use these lemmas, even if it can be obtained from the first one via cut elimination. After 
all, the main part of the mathematician's work consists of finding the right auxiliary lemmas in the first place. 

From the viewpoint of computer science the situation looks similar. Through the Curry-Howard correspon- 
dence, formulas become types and proofs become programs. The normalization of the proof corresponds to the 
computation of the program. Translating Prawitz' idea into this setting means that two programs are the same 
if and only if they have the same input-output-behavior, which completely disregards any reasonable complexity 
property. 

Independently, Lambek |Lam681 l.amWI proposed an idea for identifying proofs that is based on commuting 
diagrams in categories seen as deductive systems: two proofs are the same, if they constitute the same morphism 
in the category. For propositional intuitionistic logic on the one side, and Cartesian closed categories on the 
other side, the two notions coincide. Similarly, by using *-autonomous categories, one can make the two notions 
coincide for linear logic (see Section I2.8|) . But for classical logic, the logic of our every day reasoning, neither 
notion has a commonly agreed definition (see Section [5]) H 

Unfortunately, the problem of identifying proofs has not received much attention since the work by Prawitz 
and Lambek. Probably one of the reasons is that the fundamental problem of the bureaucracy involved in 
deductive systems (in which formal proofs are carried out) seemed to be an insurmountable obstacle. In fact, 
the problem seems so difficult, that it is widely considered to be "only philosophical". However, behind the un- 
deniable philosophical aspects, the problem clearly is a mathematical one and deserves a rigorous mathematical 
treatment. The developments in logic, proof theory, and related fields within the last two decades suggest that 
it is worthwhile to give it a new attack. In these notes we will see some ideas in that direction. 

1.3 Proof nets 

The term "proof net" has been coined by Girard [Gir87j for his "bureaucracy-free" presentation of proofs in 
linear logic. He used the term "bureaucracy" for the phenomenon of "trivial rule permutations" in the sequent 
calculus that do not change the essence of a proof. 

In these notes, we will use the term "proof net" is a broader sense: A proof net is a graph theoretical or 
geometric presentation that captures the essence of a proof and is free of any syntactic bureaucracy. Of course, 

1 This has been discovered by the historian Riidiger Thiele while studying the original notebooks of Hilbert |Thi03| . The history 
of proof theory might have taken a different development if Hilbert had included his 24th problem into the lecture. 
2 See also Dos03 for a comparison of the two notions. 
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for making this precise, it is necessary to say what is meant by "the essence of a proof" and by "syntactic 
bureaucracy". This is far from clear and is the target of most of today's research efforts on the problem of the 
identity of proofs. 

Although we use Girard's terminology, some of the ideas and technical breakthroughs that we are going 
to present are much older. The proof nets for unit-free multiplicative logic (that we use as playground for 
introducing the theory) are essentially the coherence graphs of Eilenberg, Kelly, and Mac Lane [EK66, KM71 . 
For the case of classical logic, the same idea has been rediscovered under the name of logical flow-graph by Buss 
[Bus91 . A very simplified version of proof nets for classical logic is based on Andrews' matings And76 and 
Bibel's connections [Bib81j. If the proof presentations by Andrews and Bibel (which are identical) are restricted 
to "a linear version" we can (by using the right notion of correctness) get back Girard's proof nets. But these 
linear proof nets have a much better proof theoretical behavior than the nonlinear (i.e., classical) version. This 
is the reason why we start our survey with proof nets for linear logic. 

2 Unit-free multiplicative linear logic 

Unit-free multiplicative linear logic (MLL~) is a very simple logic, that has nonetheless a well-developed theory 
of proof netsU For this reason I will use MLL~ to introduce the concept of proof nets. 

2.1 Sequent calculus for MLL~ 

When we define a logic in terms of a deductive system, we have to do two things. First, we have to define the 
set of well-formed formulas, and second, we have to define the subset of derivable (or provable) formulas, which 
is done via a set of inference rulefl Here is the necessary data for MLL - : The set of formulas is defined via 

where srf — {a, b,c, . . .} is a countable set of prepositional variables, and si = {o 1 , b A - 1 cr 1 , . . .} are their duals. 
In the following, we will call the elements of the set srf U stf^ atoms. 
The (linear) negation of a formula is defined inductively via 

o J ~ L = a (4«B) 1 = B 1 «A 1 (A^B) 1 = B i ®i 1 

Note that we invert the order of the arguments when we take the negation of a binary connective. This is not 
strictly necessary (since for the time being we stay in the commutative world) but will simplify our life when it 
comes to drawing pictures of proof nets in later sections. 

Here is a set of inference rules for MLL~ given in the formalism of the sequent calculus: 

hr,A,B,A \- T,A,B,A 

id : exch *8 

hA x ,A hr,B,A,A \-T,A>9B,A 

hr,A hB,A hT,A \- A^,A 

<g> cut 

hT,A®B,A hT,A 

Note that the sequent calculus needs (apart from the concept of formula) another kind of syntactic entity, called 
sequent. Very often these are just sets or multisets of formulas. But depending on the logic in question, sequents 
can be more sophisticated structures like lists or partial orders (or whatever) of formulas. For us, throughout 
these lecture notes, sequents will be finite lists of formulas, separated by a comma, and written with a h at 
the beginning. Usually they are denoted by T or A. 

2.1.1 Example If A and B are two different formulas, then 

hA,B h A,B,A hi,A,B 

are three different sequents. 

We say a sequent h T is derivable (or provable) if there is a derivation (or proof tree) with h T as conclusion. 
Defining this formally precise tends to be messy. Since the basic concept should be familiar for the reader, we 
content ourselves here by giving some examples. 

3 One could even say the best developed theory of proof nets among all logics that are out there... 

4 To be precise, one should say axioms and inference rules. But we consider here axioms as special kinds of inference rules, 
namely, those without premises. 
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2.1.2 Example The two sequents h a ± , a ® b (g> c 1 , c and h ((a >S? a- 1 ) ® 6) >5? b 1 - are provable: 

id ; 

h a , a 

id : id : 1— id 



hb ± ,b hc^c hfl^o 1 hb ± ,b (2) 

hs 1 ^ h 6^,6® c^,c h (a ! S > a- L )®6, o 1 - 



h a- 1 , a ®c- L ,c h ((a >£> a- 1 ) <g> 6) >S> 6 1 - 

Of course it can happen that a sequent or a formula has more than one proof. This is where things get inter- 
esting. At least for these course notes. Here are four different proofs of the sequent h a 1 *8(a (g> a), a ^(a 1 - ® a 1 ) , 
three of them do not contain the cut-rule: 

id ; id 



h a A - 1 a hfl^ 1 



* ■ , _ id 



\- a^-^(a®a),a 1 - ' \-a ± ,a (3) 



h a *g(a®a),a ® a ,a 
exch j : j— 

h a- 1 - >??(a <S>a),a,a <S> a 

h a 1 >S?(a ® a), a ^(a 1 - ® a- 1 ) 



id r id j 

h a, a h a , a 

® — ; i 1 

h a,a^- ®a^,a 

exch ■ 



ha,o,a i ®o i (4) 
j(j >g> 

ha 1 ,!) h a, a ^(a 1 - ® a 1 ) 



h a , a ® a, a ^(o 1 ® a 1 ) 
ha ii S(a8a),»^(« 1 ®« 1 ) 



id , id r 

h a , a h a, a 

® — : — i 1 — 

h a , a ® o, a 

exch 



; h a 1 , a 1 , a ® a 

ha, a 1 ha i ,a i §(a8«) 



h a, a 1 ® a 1 , a 1 - >S>(a ® a) 
h a ^(a 1 - (8) a -1 ), a 1 >S>(a (8) a) 

eXCh ; j ; — 

h a- 1 - >S?(a <g> a), a ^(a 1 - ® a 1 ) 



and one docs contain the cut-rule: 



id id 



ha,a h a , a 



htt.a 1 ^ 

id : exch 



h a 1 , a h a, a, a 1 <g> a 1 
id j ® j j : 

ha ,a h a ,a(g>a,a, a x ®a 

h a 1 , a ® a, a, a 1 ® a -1- (6) 

id : : : id : >?? : : — 

h a 1 - *8(a® a), (a 1 - *8 a^) ®a \-a ± ,a h a 1 - ^(a <g> a), a, a 1 - <g> a 1 - 

exch 



h a 1 *8{a®a), ((a 1 - ^ a^) ®a) ® a 1 , a h a, a 1 >S>(a <g> a), a 1 <g> a 1 - 

Gxch ^ 

h a 1 - >8(a®a), a, ((a 1 - f? a 1 ) <g>a) <g> a 1 - ha?(a i, ?(a®o)),a 1 «a 1 

cut j : j 

h *g{a <g> a), a, a <S> a x 

h a 1 >S?(a ® a), a ^(a 1 - ® a 1 ) 
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Are these proofs really different? Or are they just different ways of writing down the same proof, i.e., they only 
seem different because of the syntactic bureaucracy that the sequent calculus forces upon us? In the following, 
we will try to give a sensible answer to this question, and proof nets are a way to do so. 

2.1.3 Exercise Give at least two more sequent calculus proofs for the sequent 

ha i, S(a8a),flS(tt i ®a 1 ) 

2.2 From sequent calculus to proof nets, 1st way (sequent calculus rule based) 

Although, morally, the concept of proof net should stand independently from any deductive formalism, the 
proof nets introduced by Girard very much depend on the sequent calculus. The ideology is the following: 

2.2.1 Ideology A proof net is a graph in which every vertex represents an inference rule application in the 
corresponding seguent calculus proof, and every edge of the graph stands for a formula appearing in the proof. 
A sequent calculus proof with conclusion h A±, A%, . . . , A n , written as 




h A 1 ,A 2 ,...,A n 

is translated into a proof net with conclusions A%, A2, ■ ■ . , A n , written as 



r 




71 








Ai A 3 . . 


! .- 



1 I 

This is done inductively, rule instance by rule instance, as shown in Figure [1] Note that the exch-rule does 
not exactly follow the ideology. 

Let us see, what happens if we apply this translation to our four different proofs (IS])-©: The first two, i.e., 
([3]) and (0|), both yield the same proof net, namely 




a x >8(a®a) a > S(a ± ®a ± ) 
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id ■ 



h A , A 



exch 



h r, A, B, A 

hr,B,i,A 



h r, A, £?, A 



cut • 



II, / \ n 2 

hr,4 h5,A 
hr,A®B,A 




id 



A ± 

\ 


.4 

1 


r 




7T 









r B A A 



7T 



r 








-> 





























A B 



r 





















h r, a 



Figure 1: From sequent calculus to proof nets (sequent calculus rule driven) 
The proof in (J5]) yields a different proof net: 




>$ ) cs 

a x> g(a(gia) a >§> (a 1 - ® a x ) 



(8) 
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And for the proof in ([6]), we get 




(9) 



a x >9(a® a) 



a>S'(a- L ®a ± ) 



The proof nets for ([3]) and are the same, and the ones for and |6j) are different. The big question is 
now: 

2.2.2 Big Question: Is it reasonable to conclude that the two proofs in ((3]) and ((4]) are the same, while the 
one in ([5]) is different, and the one in ([5]) is even more different? 

For finding an answer, consider the following two (partial) sequent calculus proofs. 



rii / \ n 2 

hT,A \-B,A,C,D,T, 
hT,A®B,A,C,D,Y, 

i 

h r,i®B,A,C»?D,S 



vs. 



\-t,a 



B,A,C,D,E 



(10) 



h T,A®B,A,C>?D,Z 



It is certainly reasonable to say that the two proofs in (jlO)) are essentially the same — whether we apply first the 
®-rule or first the 'S'-rule does not matter in this situation. 

The phenomenon shown in (|10[) is called a trivial rule permutation. There are clearly more of them, and we 
will not give a complete list here. The point to note here is that these trivial rule permutation are a type of 
bureaucracy, which is typical for the sequent calculus, and which was one of Girard's original motivations for 
the introduction of proof nets. In fact, there is the following theorem: 

2.2.3 Theorem Two sequent calculus proofs using the rules in ([T]) translate into the same proof net if and 
only if they can be transformed into each other via trivial rule permutations. 

We will not give a proof here because it won't give any new insights. But to illustrate the main point, 
consider the following three derivations 



>S>- 
exch • 



h B,C\B 
VB*3C,B 
V- B,B>SC 



exch • 

*8 



h B 7 C,B 
VB,B,C 
V- B,B>SC 



exch • 
exch 

^ ■ 



VB,C,B 
\-B,B,C 
h B,B,C 
h B,B>SC 
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where B and C are arbitrary formulae, and the second instance of exch in the rightmost derivation exchanges 
the two occurrences of B. Note that the leftmost and the middle derivation both consist of one instance of the 
>S?-rule and one instance of exch, but are not a trivial rule permutation. When we "trivialy" permute the 'S'-rule 
and the exch-rule in the leftmost example, then we obtain the rightmost derivation, which contains one 'S'-rule 
and two exchanges. 

Now the reader is invited to do the following exercise: 

2.2.4 Exercise Find a sequence of trivial rule permutations that transforms the proof in ([3]) into the one 
in Q . Convince yourselves that it is impossible to find a series of rule permutations that converts the proof in 
(|3J| into the one in (JSJ). 

2.2.5 Exercise Give the proof nets for the two sequent proofs in ([2|). 

2.2.6 Exercise Give the proof nets for the sequent proofs that you found in Exercise 12.1.31 and compare 
them with 0), ©, and ©. 

2.3 From sequent calculus to proof nets, 2nd way (coherence graph based) 

Let us now discuss a second method for obtaining a proof net from a sequent calculus proof. Here the ideology 
is: 

2.3.1 Ideology A proof net consists of the formula tree/ sequent forest of the conclusion of the proof, together 
with some additional graph structure capturing the "essence " of the proof. 

It turns out that for MLL~ the "essence" of a proof is captured by the axiom links. More precisely, the proof 
net is obtained by drawing the "flow-graph" (or "coherence-graph" ) through the sequent calculus proof. This 
means that we trace all atom occurrences through the proof. The idea is quite simple, but again, the formal 
definitions tend to be messy. For these lecture notes, I decided not to give the detailed definitions but to show 
the idea via examples. Figure [5] shows how it is done for the examples ©J©, and ([5]). 

2.3.2 Trivial Observation The flow-graphs drawn inside the proofs have crossings exactly at those places 
where the exchange rule is applied. 

Note that if the id-rule is applied only to atoms, and there is no cut-rule present, then we get (up to some 
trivial change of notation) exactly the same proof nets as with the first method. The reason is that in MLL~ 
there is a one-to-one correspondence between the binary connectives 1? and ® appearing in the sequent and 
the instances of the inference rules for >$? and ® appearing in the proof. Further, every atom occurrence in the 
sequent is killed by an instance of the id-rule. 

2.3.3 Exercise Convince yourselves that indeed the two methods always yield the same result for cut-free 
proofs with only atomic instances of identity. Draw the flow graphs for the examples in @ and the sequent 
calculus proofs that you found in Exercise 1 2. 1.31 

In Figure [3] we convert the example in ([6]) into a proof net via the flow-graph method. Note that this time 
the result is different from the proof net in ([9]). There are two reasons. First, the non-atomic instance of the 
id-rule, and second, the presence of the cut-rule. 

The non-atomic identity rule is not a problem because an important fact about the sequent calculus system 
in (fl]) is that the id-rule can be replaced by its atomic version without changing derivability: 



id 



atomic id 



h a j a 



This is done inductively by systematically replacing 



id 



i id 

hB 1 ^ h A, A 



id 



by 



exch 



h B ± ,B®A,A 



(11) 



h A X '8B ± ,B®A 



exch 



h B^,A^,B®A 



h A^- , B^ , B ® A 



h A^*8B^,B®A 
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h a , a ha, a 

3 

h a . a 53 a, a 
! S > - 1 — : id- 



h a x *g(a®a),a J 



h a , a 



h a- 1 ^(a (8) a), a- 1 - 53 a , a 



exch 



h a 1 >S?(a ®a),a, a 1 ® a x 
h a x ^(a 53 a), a'S , (a- L 53 a x ) 

I 



h a, a 



h a , a 



exch ■ 



h a , a 



h a, o 53 a , a 
h a, a, a- 1 - 53 a x 
h a, a y g{a 1 - 53 a x ) 



h a- 1 -, a 53 a, a ^(a- 1 - 53 a x ) 
h a x 'S'(a(g)a),a'S , (a- L (gia- 1 ) 

I 



h a , a h a, a 



exch - 



h a, a J 



h a . ago, a 
h a x , a x , a 53 a 
h a- 1 -, a 1 - ^(o®a) 



h a, a- 1 - 55 a x , a- 1 - ^(a 55 a) 



exch 



h a'S ) (a J - ®a x ),a x >3(a 53 a) 
h a x >$?(a 53 a), a ^(a 1 - 53 a x ) 

I 




Figure 2: From sequent calculus to proof nets via coherence graphs 



2.3.4 Exercise Reduce in {§} the leftmost instance of id to atomic version. And draw the proof net according 
to the method in Figure [TJ What does change compared to the net in Q? 

For dealing with cuts (without forgetting them!), we can prevent the flow-graph from flowing through the 
cut, i.e., by keeping the information that there is a cut. What is meant by this is shown in Figure |U 

2.3.5 Exercise Compare the net obtained in Figure |4] with your result of Exercise 12.3.41 

Now, we indeed get the same result with both methods, and it might seem foolish to emphasize the different 
nature of the two methods if they yield the same notion of proof net. The point to make here is that this is 
the case only for MLL - , which is a very fortunate coincidence. For any other logic, which is more sophisticated, 
like classical logic or larger fragments of linear logic, the two methods yield different notions of proof nets. We 
will come back to this in later sections when we discuss these logics. 

2.4 From deep inference to proof nets 

The flow graph method has the advantage of being independent from the formalism that is used for describing 
the deductive system for the logic. We will now repeat exactly the same exercise we did for the sequent calculus 
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h a, a h a , a 



exch ■ 



h a, o <g> a , a 
h a, a, igi a 



cut ■ 



h a , a 



h a x , a ® a, a, a 1 (g) a J 



h a A 



\- a- L *3(a®a),(a ± *3a ± )®a ha x ,a 



exch 
cut 



h a x >S(a ® a), ((a x 'S' a x ) ® a) ® a x , a 



exch 



H « ^(a ® a), a, a (g> a 



h a x >S(a (gi a), a, ((a x >i? a x ) <g> a) (gi a J 



h a, a ^(a ® a), a ® a 
h a > g(a ± > S > (a®a)),a ± ®a ± 



h a ^(a (g> a), a 



h a x >S>(a ® a), a'Sfa 1 (g> a x ) 



ha ± ,a h a ± ,a®a,a,a ± gia 1 - 



h a, a- 1 'S'(aigia), 
^g^a- 1 'g(aigia)), a J -jg)jt- 1 





Figure 3: From sequent calculus to proof nets via coherence graphs 



system for MLL~ in the previous section. But this time we start from a different deductive system for MLL~, 
which is given in the formalism of calculus of structures. It is shown in Figure [5J where S{ } stands for an 
arbitrary (positive) formula context. Because of the possibility of applying inference rules deep inside any 
context, the name "deep inference" is used. 

Because of this possibility and because we do not have units in the system, we need two variants of the 
ij,-rule (doing the same job as the id-rule in the sequent calculus). Similarly, the cut, i.e., the rule it comes 
in two versions. This also means, that in principle a derivation could have nothing as conclusion. Then we 
do not have a proof, but a refutation. This leads to an important property of the system in Figure [5j namely 
its up-down symmetry. For every rule there is a dual co-rule, which is obtained by negating and exchanging 
premise and conclusion. This flipping around can then be done also for whole derivations. A derivation from A 
to B becomes a derivation from B 1 - to A- 1 , and a proof of a formula A becomes a refutation of A- 1 . 
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Figure 4: From sequent calculus to proof nets with cuts via coherence graphs 



The s-rule (called switch) is dual to itself. With the help of commutativity and associativity, i.e., the rule 
erj, ct|, al, and a] we can obtain the following variants that we also call switch: 

S{{A*8B)®C] S{B®{A>SC)} S{(A*3C)®B} 

S S{A*g(B®C)} S S{A*8{B®C)} S S{(A®B) >gC} ^ 

Similarly, with the help of a I and a] , we can get two other versions if ij and if: 

S{B} SjjA®A^B} 
> l S{B®(A^A) } ^ ' T Sm (13) 

Here are three examples of derivations in the calculus of structures: 

(fe- L 'S > c ± )®c (a r 3b)®a ± 
s — : ; s ■ 



^b^b 1 - ' T b x ' T ' h CI 4) 

>l ((a>Sa ± )®6)^6 ± ^ b ± ®(a>?a ± ) 

S : — S ■ 

a>S , (6- L <g>a- L ) c L *8(c®b) 





\>8b 


b 


(c 1 - ^ c) 


®b 
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A® A 1 - 

,1 aWa iT 

S{B} . S{B^{A®A ± )} 

>l S{{A ± >sA)®B} ' T S{B} 

■ S{AVB} S{A®B} 
S{B^A} al S{B ® A} 

S{A^(B^C)} S{A®(B®C)} 
aJ " S{{A>8B)>2C} aT S{(A® B) ®C} 

S{A®(B>%C)} 
5 S{(A®B)>?C} 

Figure 5: A system for MLL - in the calculus of structures 



The last two are dual to each other. 

In order to go on, we have to make sure that the deductive system shown in Figure [5] speaks about the same 
logic, as the one shown in (Q]). This does the following theorem: 

2.4.1 Theorem Let A be an MLL~ formula. There is a sequent calculus proof of A, denoted by 



h A 

in the system shown in ([1]), if and only if there is a proof of A in the calculus of structures denoted by 

II ^ 
.4 

in the system shown in Figure^ 

Proof: For going from sequent calculus to calculus of structures, we show that every rule in (JTJ) can be simulated 
by the rules in Figure [5] The only interesting cases are ® and cut, which are simulated as follows: 

„ , AX (T>8A)®(A ± >2A) 
(V >$ A) ®(B >V A) s- — 

T>9(A® B>S>A)) and s 

s ■-— — - — : ^ Y^{A®A^A 

r>g{A®B)>8A if 

v ' Y^A 

For the rules *8 and exch it is trivial. Now we can mimic the sequent calculus proof such that different branches 
in the proof tree, say 

i-ri hr 2 ... hr„ 

are kept together in a single formula 

r 1 ®T 2 ®---®r n 

In the end, we have for every instance of id in the sequent proof tree and instance of ij, in the calculus of 
structures proof. 
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For the other direction, we first have to show for every rule 

S{A} 
" S{B} 

in Figure O the sequent h A , B is provable with the rules in ([T]). Here we do it only for the switch rule: 

id ■ 



exch ; ; 

h A^,B^,A®B 

id 1— exch 



hC.C 1 hB- L ,i4- L ,A®B 
® h C, C- L ®B ± ,A ± ,A®B 

^ Tcac i ~®b i ^a\a®b' 

6XC h (C- L ® J B- L )'S , ^- L ,C , , J 4®B 
GXC F~Jc T ^B I y^A\A®B^C 
19 h {C ± ®B ± )*S>A ± 7 (A®B)*S>C 

for the other rules it is similar. Now we show that in fact the sequent h SIA}- 1 , S{B} (for every positive 
context S{ }) can be proved with the rules in {J). This is done by structural induction onS{ }. If S{ } — { }, 
we are done. If S{ } — C C3>S"{ } for some formula C and some (smaller) context S'{ }, then we have 

v n' 



h C\C h S'{B}, S'lA} 1 
® hC- L ,C®5'{B},5'{A} 1 - 



y 5 



where II' exists by induction hypothesis. The other cases, i.e., S{ } = C*t?S'{ }, S{ } = S'{ }<8>C, and 
S{ } = S'{ } *gC, are similar. Now we are ready to simulate the whole derivation. We proceed by induction 
om the length of II (i.e., the number of rule instances). If the length is 1, then it must be an instance of ij., and 
we get a sequent calculus proof with id. Now assume the length of II is > 1, i.e., II is of shape 

II 

S{A} 
r S{B} 

Then we can build 



cut ■ 



n'/ \n" 
S{A} h S{A} ± , S{B} 



hS{B} 

where II' exists by induction hypothesis and II" by what has been said above. □ 
2.4.2 Corollary Let A\, A2, ■ ■ ■ , A n be a list of MLL - formulas. There is a sequent calculus derivation 




h Ai,A 2 ,...,A n 
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s : : — 

a^a^{a^ ® a x ) 

((a x >S a) ® a) "S a ^>(a x ® a x ) 
a^»3(a®a)*3a >S , (a ± ® a x ) 



a x >S>(a®(a>S'a x )) 

s : 1— 

i a x >S , (a®a)'S , a x 

a x ^(a® o) ^>(a x ®(a>S , a x )) 

a 1 ?(««(i)«a«(ii 1 ®a 1 ) 



a x >S((a^>a x )®a) 
s 1 1 — 

a x >S(a® a) >S>a x 

a x ^(a® a) 'S , ((a'S , a x ) ® a x ) 
a x ^(a® a) >S , a , S , (a x ® a x ) 



J 



I 



id 




Figure 6: From calculus of structures to proof nets 



if and only if there is a derivation 

II ^ 

Ax >S> A 2 >$ ■ ■ ■ "8 A n 

in the calculus of structures. 

Let us now see how derivations in the calculus of structures are translated into proof nets. The method is 
exactly the same as in the previous section: We simply trace the atoms through the derivation. Figures [BHU 
show the calculus of structures version of Figures [2] [4] 

2.4.3 Trivial Observation We get the same proof nets as before. 

2.4.4 Subtle Observation In Figures [S] and [H] the flow-graphs drawn inside the proofs have the same 
crossings as the resulting proof nets, while in Figures [2] and [H the flow-graphs drawn inside the proofs have 
more (seemingly unnecessary) crossings. 
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a x >S>(a® a) > S > ((a ± V a X ) (8) a) 



a x V(a ® a) ^(((a 'S' a ) ® a) ®(a V a ^(a ® a x ))) 
a x >S , (a®a) > S'(((a X! S'a x )®a)®(a >S> a)) >S>(a x ® a x ) 
a x *8>(a®a) ! S'(((a ± > S'a ± ) ® a) ®(a >S((a x >§> a) ® a))) "S>(a x ® a X ) 



a x 


^(a® a) ^(((a 1 > S'a ± ) 


g>a) ®(a 


S> a x >S>(a® a))) ^(c^ ® a x ) 


a x ^(aS 


3«)?(((« li Sa i )®«)« 


)(a>S'((a x 


>S>a) ® a x ) >g(a® a))) >S(a x ® a x ) 


a x >S(a 


® a) ^(((a x "Sa-L) ® a) 




•S , (a®a x ) ^(a® a))) ^(a 1 - ® a x ) 


r x 

a 


^(a® a) ^(((a 1 - "8 a^) 


g>a)®(a>f 


?a x ^ (a® a))) 'S'(a x ® a x ) 


a x >S(a(; 


5a)S((((a 1 ?a i )«a) 


g>(a>8>a X ) 


) ®(a>S , a x >g(a® a))) >S(a x ® a x ) 


a x ^(aij 


J>a)>S , a>S , ((((a x >S , a x )<g 


a) ® a x ) 


® (a>S , (a x 'S , (a®a)))) > S , (a x ®a x ) 




a X| S'(ai8ia) > S , a 


1 


(a x ®a x ) 






a) >S>((a x 






^ a x > S , (a(8)a)>S , (((a x > 


?a x )®a 


®(a ! S'a>S , (a x ®a x ))) 


! 1 


S a x >S(a®a)>S > (((a x >S 


5 a x ) ® a) 


®(a >S a)) ^(a 1 - ®a x ) 



a x >§>(<: 


t ® c 


i?((Oj 


x, S'a x )®a)®(c 




i x >S a) ® 


*)))*(< 


i x gTi 




a x -S>(c 


i ® ( 


»)*(((< 


i x , Sa x )®a)®(( 




i x ^(a® f 


0)W< 


® ( 





a) ^(((a 1 >3 o x ) ® a) ®(a ^((a 1 - >S a) ® a x ) V(a ® a))) 'S'(a x ® a x ) 
^(a ® a) ^(((a- 1 'S' a x ) ® a) ®(a a x >S(a ® a x ) ^(a ® a))) VCa 1 - ® a x ) 

a x ^(a ® a) ^(((a x a x ) ® a) ®(a a x 'S (a ® a))) ^(a 1 - ® a x ) 
>S>(a ® a) ^((((a- 1 'S' a x ) ® a) ®(a >S a x )) ®(a V a X ^(a ® a))) 'S'(a x ® a x ) 




a) 'g a ^((((^gj«^L® a) ® a 



^J2( lx JgM®-<i)) 
(cH^a- 1 ) 



i 




Figure 7: From calculus of structures to proof nets 



2.5 Correctness criteria 

We have seen how we can obtain a proof net out of a formal proof in some deductive system. But what about 
the other way around? Suppose we have such a graph that looks like a proof net. Can we decide whether it 
really comes from a proof, and if so, can we recover this proof? Of course the answer is trivially yes because the 
graph is finite and we just need to check all proofs of that size. The interesting question is therefore, whether 
we can do it efficiently. 
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a x 'S'(aiSia)'S > ((a- L >2ft x ) ®a) 
>S(a ® a) V(((a x a- 1 -) ® a) ®(a >S a V(a x ® a- 1 -))) 



>S(a®a) , S , (((£i x >S'a x )®a)®(a >S> a)) ^(a- 1 - ® a x ) 



a x >8(a ® a) ^(((a 1 - >S> a x ) <S> a) ®(a ^((a 1 - >S a) ® a))) ^(a 1 - ® a x ) 



a x >£(a ® a) ^(((a 1 - ^ a x ) ® a) ®(a a x ^(a ® a))) ^(a 1 - <g> a x ) 
„-L >of„ «?> a ) >S>(((a x >S>a x ) igia) ®(a ^((a 1 - >S a) (go- 1 ) V(a® a))) 'S'(a ± ® a x ) 



^(A^® \jjS > (((^'g a- 1 ) ® o) ®(£»^ i^J9(a ® n x ) ^(a ® a))) ^(a 1 - ®> x ) 
a x >£(a ® a) ^(((a 1 - a x ) ® a) ®(a ^ £J X 'S (a ® a))) ^(a 1 - ® a x ) 



a x <S>(a ® a) ^((((a 1 - 'S 1 a x ) ® a) ®(a >S a x )) ®(a >S> a x >g(a ® a))) ^(c 


t X ® £ 


6 


a x >S>(a ® a) ^ a ^((((a 1 - So i )«o)«o 1 )8(n 1 S(a i >S>(ci ® a 


))))*(< 


l X ® 






Figure 8: From calculus of structures to proof nets 



The answer is still yes, and it is done via so-called correctness criteria. For introducing the idea, we take 
the following graphs as running examples 




*8 *3 ® ® 
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By playing around, you will notice that it is quite easy to find a proof (in sequent calculus or calculus of 
structures) that translates into the net in (| 15(1 , but it seems impossible to find such proofs for the two examples 
in (fT6| . We are now going to show that this is indeed impossible. For doing so, we need some formal definitions. 

2.5.1 Definition A pre-proof net is a sequent forest T, possibly with cuts, together with a perfect matching 
of the set of leaves (i.e., the set of occurrences of propositional variables and their duals), such that only dual 
pairs are matched. 

In this context, a cut must be seen as a special kind of formula A(J)A ± , where (D is a special connective 
which may occur only at the root of a formula tree in which the two direct subformulas are dual to each other. 
For example, lfll)|) should be read as 




Clearly, the examples in (|15[) and (|16|) are all pre-proof nets. In the following, we will think of an inner node 
(i.e., a non-leaf node) of the sequent forest labeled not only by the connective but by the whole subformula 
rooted by that connective. Our favorite example (fT"5f should then be read as 




\ / \ / \ / HBP) 

a (Da 1 - a^a 1 - c^c 1 - 
\ / 

Although sometimes we think of pre-proof nets to be written as in (|15I'P , we will keep writing them as in (| 1 5|) 
for better readability. 

2.5.2 Definition A pre-proof net tt is called sequentializable iff there is a proof in the sequent calculus or 
in the calculus of structures that translates into ir. 

Originally, the term "sequentializable" was motivated by the name "sequent calculus" . But we use it here 
also if the "sequentialization" is done in the calculus of structures. 

2.5.3 Definition Let tt be a pre-proof net. A switching for 7r is a graph obtained from it by removing for 
every >S?-node one of the two edges connecting it to its children. 

Clearly, if a pre-proof net contains n 'S-nodes, then there are 2™ switchings. Here are all 4 switchings for 
the example in (fl~5|) : 
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2.5.4 Definition A pre-proof net obeys the switching criterion (or, shortly, is correct) iff all its switchings 
are connected and acyclic. 

As (fTT|) shows, the pre-proof net in (TT5|) is correct. The two pre-proof nets in (fTl)]) are not, as the following 
switchings show: 



The first is not connected, and the second is cyclic. 

In the following, we use the term proof net for those pre-proof nets which are correct, i.e., obey the switching 
criterion. The following theorem says that the proof nets are exactly those pre-proof nets that represent an 
actual proof. 

2.5.5 Theorem A pre-proof net is correct if and only if it is sequentializable. 

We will give two proofs of this theorem. The first uses the sequent calculus, and the second the calculus of 
structures. For the first proof, we need the following lemma: 

2.5.6 Lemma Let tt be a proof net with conclusions A\, ... , A n . If all Aj have a ® or a cut as root, then 
one of them is splitting, i.e., by removing that ® (or®), the net becomes disconnected. 

For proving this lemma, we need some more concepts. 

2.5.7 Definition Let a and ir be pre-proof nets. We say a is a subprenet of n, written as a C tt if all 
formulas/cuts appearing in a are subformulas of the formulas/cuts appearing in tt, and the linking of a is the 
restriction of the linking of tt to the formulas/cuts in a. We say a is a subnet of 7r if a C tt, and cr and tt are 
both correct. A door of cr is any formula that appears as conclusion of a. 

2.5.8 Example Consider the following three graphs: 



The first two are subprenets of (115|) . the third one is not (because a link is missing). The second one is in fact 
a subnet of (|15p. but the first one is not (because it is not correct). The doors of the first example are a, a , 
and a >?? a 1 - . The doors of the second example are a CD a 1 - and a*8 a 1 - . 

2.5.9 Lemma Let a and p be subnets of some proof net tt. 

(i) The subprenet a U p is a subnet of tt if and only if a n p 7^ 0. 

(ii) If a n p 7^ then a Pi p is a subnet of tt. 

Proof: Intersection and union in the statement of that lemma have to be understood in the canonical sense: 
An edge/node/link appears in in cr n p (resp. cr U p) if it appears in both, a and p (resp. in at least one of cr or 
p). For giving the proof, let us first note that because in it every switching is acyclic, also in every subprenet 
of tt every switching is acyclic, in particular also in a U p and a D p. Therefore, we need only to consider the 
connectedness condition. 

(i) If cr n p = then every switching of a U p must be disconnected. Conversely, if a H p ^ 0, then every 
switching of cr U p must be connected (in every switching of a U p every node in a (~l p must be connected 
to every node in a and to every node in p, because a and p are both correct). 

(ii) Let a n p 7^ and let s be a switching for a U p. Then s is connected and acyclic by (i). Let s a , s p , and 
So-np, be the restrictions of s to cr, p, and cr n p, respectively. Now let A and B be two vertices in a n p. 
Then A and B are connected by a path in s a because a is correct, and by a path in s p because p is correct. 
Since s is acyclic, the two paths must be the same and therefore be contained in s anp . □ 




(18) 
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2.5.10 Lemma Let it be a proof net, and let A be a subformula of some formula/cut appearing in tt. Then 
there is a subnet a of tt, that has A as a door. 

Proof: For proving this lemma, we need the following notation. Let tt be a proof net, let A be some formula 
occurrence in tt, and let s be a switching for tt. Then we write s(tt, A) for the graph obtained as follows: 

• If A is an immediate subformula of a formula occurrence B in 7r, and there is an edge from B to A in s, 
then remove that edge and let s(tt, A) be the connected component of (the remainder of) s that contains 
A. 

• Otherwise let s(ir,A) be just s. 
Now let 

a = f]s(%,A) 

s 

where s ranges over all possible switchings of tt. (Note that it could happen that formally a is not a subprenet 
because some edges in the formula trees might be missing. We graciously add these missing edges to a such 
that it becomes a subprenet.) Clearly, A is in a. We are now going to show that A is a door of a. By way 
of contradiction, assume it is not. This means there is ancestor B of A that is in f] s s(w, A). Now choose a 
switching s such that whenever there is a >?? node between A and B, i.e., 

A A 

C\ C 2 C 2 C'i 

\ / - \ / 

Ci*9C 2 

B B 
then s chooses C\ (i.e., removes the edge between C 2 and its parent). Then there must be a £S> between A and 



D 1 D 2 D 2 L>i 

\ / - \ / 

D X ®D 2 D 2 ®D X 



B B 
Otherwise B would not be in a. Now suppose we have chosen the uppermost such ®. Then the path connecting 
A and D\ in s{tt,A) cannot pass through D 2 (by the definition of s(tt, A)). But this means that in s there are 
two distinct paths connecting A and D±, which contradicts the acyclicity of s. 

Now we have to show that a is a subnet. Let s be a switching for a. Since a is a subprenet of tt, we have 
that s is acyclic. Now let s be an extension of s to it. Then s is the restriction of s(7r, A) to a, and hence 
connected. □ 

2.5.11 Definition Let 7r be a proof net, and let A be a subformula of some formula/cut appearing in tt. 
The kingdom of A in tt, denoted by kA, is the smallest subnet of tt, that has A as a door. Similarly, the empire 
of A in tt, denoted by eA, is the largest subnet of tt, that has A as a door. We define A <C B iff A e kB, where 
A and B can be any (sub) formula/cut occurrences in tt. 

An immediate consequence of Lemmas 12.5.91 and 12.5.101 is that kingdom and empire always exist. 

2.5.12 Exercise Why? 

2.5.13 Remark The subnet a constructed in the proof of Lemma [2.5.1 01 is in fact the empire of A. But we 
will not need this fact later and will not prove it here. 
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2.5.14 Lemma Let tt be a proof net, and let A, A' , B , and B' be subformula occurrences appearing in tt, 
such that A and B are distinct, A' is immediate subformula of A, and B' is immediate subformula of B. Now 
suppose that B' G eA' . Then we have that B £ eA' if and only if A £ kB. 

Proof: We have B' G eA 1 n kB. Hence, a — eA 1 n kB and p — eA 1 U kB are subnets of tt. By way of 
contradiction, let B ^ eA 1 and A ^ kB. Then p has A' as door and is larger than eA 1 because it contains B. 
This contradicts the definition of eA' . On the other hand, if B G eA' and A G kB then a has B as door and is 
smaller than kB because it does not contain A. This contradicts the definition of kB. □ 

2.5.15 Lemma Let tt be a proof net, and let A and B be subformulas appearing in tt. If A <C B and B <C A, 
then either A and B are the same occurrence or they are dual atoms connected via an identity link. 

Proof: If a and a 1 - are two dual atom occurrences connected by a link, then clearly ka = ka 1 - . Now let A and 
B be two distinct non-atomic formula occurrences in tt with A G kB and B G kA. Then kA n kB is a subnet 
and hence kA = kA O kB = kB. We have two cases: 



If A = A' *g A" then the result of removing A from kB is still a subnet, contradicting the minimality of 
kB. 



• If A = A'® A" then kA = kA' U kA" U {A'® A"}. Hence B G kA' or B G kA" . This contradicts 
Lemma |2~5.14[ which says that B £ eA' and B £ eA" . □ 

From Lemma 12.5.151 it immediately follows that <C is a partial order on the non-atomic subformula occur- 
rences in tt. We make crucial use of this fact in the following: 

Proof of Lemma 12.5.01 Choose among the conclusions Ax,..., A n (including the cuts) of tt one which is 
maximal w.r.t. <C- Without loss of generality, assume it is A.- L = A' t A". We will now show that it is splitting, 
i.e., tt = {A'i ® A"} U eA[ U eA". By way of contradiction, assume A\ ® A" is not splitting. This means we have 
somewhere in tt a formula occurrence B with immediate subformula B' such that (without loss of generality) 
B' G eA\ and B ^ eA^. We also know that B must occur at or above some other conclusion, say Aj — A'j ® A". 
Hence B G k Aj and therefore kB C kAj . But by Lemma 12.5.141 we have A; G kB and therefore Ai G kAj , 
which contradicts the maximality of A4 w.r.t. <C. □ 



Finally, we can prove Theorem 12.5.51 

First Proof of Theorem 12. 5. 5t Let us first show that the (in the sequent calculus) sequentializable pre-proof 
nets are indeed correct. This is done by verifying that the id-rule yields correct nets (which is obvious) and that 
all other inference rules preserve correctness. For the exch-rule this is obvious. Let us now consider the ®-rule. 
By way of contradiction, assume that 



7Tl 



7T 2 



and 

r A B A 



are correct, but 











J 


U , ' 



A B 




is not correct. This means there is a switching that is either disconnected or contains a cycle. Since a ®-node 
does not affect switchings, we conclude that the property of being disconnected or cyclic must hold for the same 
switching in one of ttx or tt2- But this is a contradiction to the correctness of tti and tti. For the the 'S'-rule and 
the cut-rule we proceed similarly. 
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Conversely, let tt be a correct pre-proof net. We proceed by induction on the size of tt, i.e., the number n 
of f?-, <8>-, and cut-nodes in 7r, to construct a sequent calculus proof II, that translates into tt. If n is 0, then tt 
must be of the shape 




A- 1 



and we can apply the id-rule. Now let n > 0. If one of the conclusion formulas of tt has a >S?-root, we can 
apply the 'SP-rule and proceed by induction hypothesis. Now suppose all roots are ® or cuts. Then we apply 
Lemma \2. 5.61 which tells us, that there is one of them which splits the net. Assume, without loss of generality, 
that it is a ®-root, say A t = A! i ®A". This means, the net is of the shape 



7Tl 



)A'I 



7T 2 



and we can apply the ®-rule and proceed by induction hypothesis for tt\ and tt2- If the splitting root is a cut, 
we apply the cut-rule instead. □ 

Let us now see the second proof. For this, we need the following lemma: 

2.5.16 Lemma Let it be a proof net with conclusion 

S{(A®B{a})>2(C{a x }®D)} , 

such that the a and the a 1 - are paired up in the linking. Let tt' and tt" be pre-proof nets with conclusions 

S{A®{B{a}*?{C{a^}®D))} and S{{{A <g> B{a}) >S> C^cr 1 }) ® D} 

respectively, such that the Unkings of tt' and tt" (i.e., the pairing of dual atoms) are the same as the linking of 
tt. Then at least one of tt' and tt" is also correct. 

Proof: Let us visualize the information wc have about tt, tt' , and tt" as follows: 




We proceed by way of contradiction, and assume that tt is correct and that tt' and tt" are both incorrect. If 
there is a switching s for tt' (or tt") that is disconnected, then the same switching is also disconnected in tt. 
Hence, we need to consider only the acyclicity condition. Suppose that there is a switching s' for tt' that is 
cyclic. Then, in s' the below B must be switched to the right, and the cycle must pass through A, the root 
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and the *g as follows: 



rt 



a C D 

\/ 

B ® 

/ 

A >s> 



Otherwise we could construct a switching with the same cycle in ir. If our cycle continues through D, i.e., 



rt 



a C D 

\/ 

B ® 
/ 



(19) 



then we can use the path from A to D (that does not go through B or C, see Exercise 12.5. 17p to construct a 
cyclic switching s in 7r as follows: 





r 

a 






B 





Hence, the cycle in s' goes through C, giving us a path from A to C, not passing through S (see Exercise l2.5.17j) : 





y 


a 


c 


B 


\, 

® 



(20) 



By the same argumentation we get a switching s" in ir" with a path from B to D, not going through C. From 
s' and s" , we can now construct a switching s for n with a cycle as follows: 



A B C D 
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which contradicts the correctness of n. □ 



2.5.17 Exercise Explain why we can in (|19|) assume that the cycle does not go through B or C, and in (I20|) 
not through B. 

In our second proof of Theorem 12 . 5 . 51 we will also need the following concept: 

2.5.18 Definition Let A be a formula. The relation web of A is the complete graph, whose vertices are 
the atom occurrences in A. An edge between two atom occurrences a and b is colored red, if the first common 
ancestor of them in the formula tree is a ®, and green if it is a > S > . 

2.5.19 Example Consider the formula (a 1 - *8(a ® a)) 1? (a *S>(a ® a ± )). Its formula tree is the following: 




The relation web is therefore 

a 1 - 



a 





a 

where we use regular edges for red and dotted edges for green. 

2.5.20 Definition The degree of freedom of a formula A, is the number of green edges in its relation web. 

Second Proof of Theorem 12.5.51 Again, we start by showing that all rules preserve correctness. Here, 
the only interesting case is the switch rule (all others being trivial), which does the following transformation 
somewhere inside the net: 

\ \/ \/ I 

(21) 

*8 

By way of contradiction, assume the net on the left is correct, and the one on the right is not. First, suppose 
there is a switching for the second net that is cyclic. If that cycle does not contain the <g)-node shown on the 
right in (|2~1]) , then this cycle is also present in the net on the left in (|2"Tj) . If our cycle contains the (8>-node, then 
we can make the same cycle be present in the net on the left by switching the 'S-node to the left (i.e., removing 
the edge to the right). Now assume we have a disconnected switching for the net on the right. Then the same 
switching also disconnects the net on the left. Contradiction. 

Conversely, assume we have a correct net n with conclusion F. For the time being, assume that 7r is cut-free. 
We proceed by induction on the degree of freedom of F. Pick inside F any pair of atoms that are linked together, 
say a and a ± . Then F = S{Si{a} >S Sa{a }}• Without loss of generality, we can assume that Si{ } and } 
are not 'S'-contexts. We have the following cases: 

• If S\{ } = S2{ } = { }, we can apply the rule ij, and proceed by induction hypothesis. 

• If Si{ } j= { } and S 2 { } = { }, then F = S{(A <g> B{a}) *8 a^} for some A and B{ }. We can apply 
the switch rule to get S{A ®(B{a} 1? a -1 )}, which is still correct (with the same linking as for F), but has 
smaller degree of freedom than F. The case where Si{ } — { } and } ^ { } is similar. 

• IfSi{ }^{ }andS 2 { }^{ }, then, without loss of generality, F = S{(A®B{a}) ^(Cja- 1 } ® £>)}, for 
some A, B{ }, C{ }, D. By Lemma \2. 5.161 we can apply the switch rule, since one of 

S{A®{B{a}*g{C{a ± }®D))} and S{((A® B{a}) >$ (^{a^}) ® D} 

is still correct. Since both of them have smaller degree of freedom than F, we can proceed by induction 
hypothesis. 
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If 7r contains cuts, we can replace inside ir all cuts with ®, to get a formula F' such that there is a derivation 

F' 

F 

Then ir becomes a cut-free net with conclusion F', and we can proceed as above. □ 

Note that the two different proofs of Theorem 12.5.51 yield a stronger version of Theorem 12.4.11 
2.5.21 Theorem For every sequent calculus proof 




hA 1 ,A 2 ,...,A 

there is a proof in the calculus of structures 



yielding the same proof net, and vice versa. 

A geometric or graph-theoretic criterion like the one in Definition 12.5.41 and Theorem 12.5.51 is called a 
correctness criterion. The desired properties are soundness and completeness, as stated in Theorem 12.5.51 For 
MLL~, the literature contains quite a lot of such criteria, and it would go far beyond the scope of this lecture 
notes to attempt to give a complete survey. But nonetheless, we will show here two other correctness criteria. 

For the next one, we write the pre-proof nets in a different way: 




We call the resulting graphs RB-graphs. The R and B stand for Regular/Red and Bold/Blue. The main 
property of these graphs is that the blue/bold edges (in the following called B- edges) provide a bipartition of 
the set of vertices, i.e., every vertex in the RB-graph is connected to exactly one other vertex via a B-edge. The 
red/regular edges are in the following called R- edges. 
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Here are the examples from (|T5j) and (fl6|) written as RB-graphs: 




2.5.22 Definition Let G be an RB-graph. An JE-path in G is a path whose edges are alternating R- and 
B-edges, and that does not touch any vertex more than once. An JE-eycle in G is a iE-path from a vertex to 
itself, starting with a B-edge and ending with an R-edge. 

The A and E stand for "alternating" and "elementary" . The meaning of "alternating" should be clear, and 
the meaning of "elementary" is that the path or cycle must not cross itself. 

2.5.23 Definition A pre-proof net tt obeys the RB-criterion (or shortly, is RB-correct) iff its RB-graph G^ 
contains no jE-cycle and every pair of vertices in G w is connected via an iE-path. 

2.5.24 Theorem A pre-proof net is RB-correct if and only if it is a proof net. 

Proof: We show that a pre-proof net is RB-correct iff it obeys the switching criterion, which is easy: If there 
are two vertices in the RB-graph not connected by an iE-path, then there is a switching yielding a disconnected 
graph, and vice versa. Similarly, the RB-graph contains an iE-cycle if and only if we can provide a switching 
with a cycle. □ 

2.5.25 Exercise Work out the details of the previous proof. 
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For the third correctness criterion, we write our nets in yet another way: 





V 



(25) 



A B 



A®B 



V 



A A 1 - 
cut 



Now consider the following two rewriting rules on these graphs: 



and 




(26) 



It is important to note that in the first rule the two edges are between the same pair of vertices and are connected 
by an arc at exactly one of the two vertices. The second rule only applies if the two vertices on the lefthand 
side are distinct, and the edge is not connected to another edge by an arc. 



2.5.26 Theorem The reduction relation induced by the rules in 



is terminating and confluent. 



Proof: Termination is obvious because at each step the size of the graph is reduced. Hence, it suffices to show 
local confluence to get confluence. But this is easy since there are no (proper) critical pairs. □ 

This means that for each pre-proof net we get a uniquely defined reduced graph, and the question is now 
how this graph looks like. 

2.5.27 Exercise Apply the reduction relation defined in (f2"6"|) to the nets in (|15l) and (fTBf . 

2.5.28 Definition A pre-proof net obeys the contraction criterion if its normal form according to the re- 
duction relation defined in (12"6"1) is 



i.e., a single vertex without edges. 

At this point rather unsurprisingly, we get: 
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2.5.29 Theorem A pre-proof net obeys the contraction criterion if and only if it is a proof net. 

Proof: As before, we show this by showing the equivalence of the switching criterion and the contraction 
criterion. This is easy to see since both reductions in (|26|) preserve and reflect correctness according to the 
switching criterion. □ 

Before we leave the topic of correctness criteria, let us make some important observations on their complexity. 
The naive implementation of checking the switching criterion needs exponential time: if there are n par-links 
in the net, then there are 2™ switchings to check. However, checking the RB-criterion needs only quadratic 
runtime. To verify this is an easy graph-theoretic exercise. It is also easy to see that checking the contraction 
criterion can be done in quadratic time. But it is rather surprising that it can be done in linear time in the size 
of the nct0 This means that (in the case of MLL ) when we go from a formal proof in a deductive system like 
the sequent calculus or the calculus of structures (whose correctness can trivially be checked in linear lime in 
the size of the proof) to the proof net, we do not lose any information. The proof net contains the essence of 
the proof, including the "deductive information". Unfortunately, MLL~ is (so far) the only logic (except some 
variants of it), for which this ideal of proof nets is reached. We come back to this in Sections [3] and [5] 

2.6 Two-sided proof nets 

The proof nets we have seen are also called one-sided proof nets. This implies that there is another kind: the 
so called two-sided proof nets. Their existence is justified by the fact, that systems in the sequent calculus can 
also come in a two-sided version. Here is a two-sided sequent calculus system for MLL - : 

rhA,A A,r'hA' 

cut ■ 



Ah- A r,r'hA,A' 

r,B,A,r'hA r h A, £?, A, A' 

exchL exchR 

r,i,B,r'hA r h a,a,b,a' 

r.ihA T'JhA' T \- A, B, A 

>8>L-^— — ' - - >SR 



T,T',A^B\- A, A' T\-A*8B,A 
f,4,BhA fhA,A r'hB,A 



(27) 



r,i®Bh a r,r h a®b, a, a' 

rh4,A r',BhA Y,A\-B,A 



I\r. A -o B h A, A' T\-A-oB,A 



T\-A,A . T,AhA 



r.AHA rhA^A 

Now sequents are not just lists of formulas, but pairs of lists of formulas, and these pairs of lists are separated by 
a h . One reason for using two-sided sequent systems is that one can treat negation as a proper connective (i.e., 
it is not pushed down to the atoms as in the one-sided version) and that one can have implication as primitive 
(i.e., there are rules for implication, instead of just defining A —o B = A 1 - *gB). Of course, the disadvantage 
is that we heavily increase the number of rules. Here is an example of a two-sided derivation using the rules 
in ([23): 



d- 



a 

id • L-r 

aha a . 



a, a — a a , a h aha 

?L- '— (28) 

a, a —° a , a*g ah a 

,_L p ' 

a, a — o a 1 - h a, (a >8 a) 1 - 



a ®(a — o a ) h a, (a 1? a) 1 - 
a ®(o a- 1 ) h a ^(a *g a) 1 - 



5 For references, see Section 12.91 
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We omitted the instances of the exchange rule in this example. 

We can follow ideology 12.2.11 to translate two-sided sequent proofs into proof nets. But we have to assign to 
each rule and each formula appearing in the net a label which indicated whether the rule/formula comes from 
the left-hand side or the right-hand side of the sequent. We use here the letters L and R. Figure [5] shows how 
the sequent rules in (|2"Tj) are translated into proof nets. We omitted the rules for exch (compare with Figure [1]) 
and • . Here is the result of translating (|28|) : 




a<gi(a ^> a ± )± a *g(a *g a) x :R 



Note that the nets in ([7]) and (|29p are almost identical from the graph-theoretical viewpoint. The only differences 
are that the labels are different and that there are additional ■ L and -^R nodes in 
Of course, we can also use the flow-graph method to obtain a proof net from ((28)) 





(30) 



However, observe that from the flow-graph we do not get a priori the information what is left and what is right. 
This means, for a proper definition of pre-proof net, we need to find another way to determine when we may allow 
an identity link between a pair of atoms. To do so, we use polarities: we assign to each subformula appearing 
in the sequent a unique polarity, that is, an element of the set {•, o}, where • can be read as left /negative/up 
and o as right/positive/down. Let T h A be given. Then 

(i) all formulas in T get polarity •, and all formulas in A get polarity o; 

(ii) whenever A®B has polarity • (resp. o), then A and B also get polarity • (resp. o); 

(iii) whenever A>8 B has polarity • (resp. o), then A and B also get polarity • (resp. o); 

(iv) whenever A — o B has polarity • (resp. o), then A gets polarity o (resp. •) and B gets polarity • (resp. o); 

(v) whenever A 1 - has polarity • (resp. o), then A gets polarity o (resp. •). 

Note that only for negation and implication there is a change of polarity. We can now give the following 
definition: 
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id 




A:L A:R 



7T2 



A:R A:L 
F:L, A:R N^CUt)^ r':L,A': 



7Tl 



7T 2 




T:L, A:R A>g B:L r':L,A':R 



7T 

A:R S:R 



r:L A^BiR A:R 



A:L B:L 



F:L A®B:L A:R 



7Tl 



7T2 



A:R B:R 
r:L,A:R A® B:R r':L,A':R 



7Tl 



7T 2 



A:R _B:L 
r:L,A:R A — o B:L r':L,A':R 



7T 



A:L B:R 




V:L A —o B:R A:R 



Figure 9: From two-sided sequent calculus to proof nets (sequent calculus rule driven) 



2.6.1 Definition A two-sided pre-proof net consists of a list of formula trees, which is correctly polarized 
according to (ii)-(v) above, together with a perfect matching of the set of leaves, such that two leaves are 
matched only if they are labeled by the same atom and have different polarity. If there are cuts in the net, then 
the two cut formulas have to be identical and must have different polarity. 

As an example we give here the net corresponding to (|30|) : 




RR n° 6013 



32 



Lutz Strafiburger 



where we put the polarity as superscript to nodes in the trees. It should not come at a surprise that we get 
(again, up to some trivial change in the notation) the same proof nets as with the first method. 

The correctness criteria are exactly the same as we discussed them for one-sided proof nets in Section 12.51 
The only thing to note is that the <g)*, 'S' , and — o° behave as the *8 in Section l2~5l i.e., remove one edge to a 
child to get a switching, and the <8>°, 1?*, and — o* behave as the ® in Section l2~5l Clearly, the example in (|31[) 
is correct. 



Let us now for the time being forget the — o and • nodes that flip the polarity. Then we can draw the 
two-sided proof net in a two-sided way. Things with polarity • are drawn on the top and things with polarity 
o are drawn at the bottom. In between we put the identity links. Since we now have again negated atoms, we 
have to change the condition on the identity links: Two atoms occurrences may be linked, if they are the same 
and have different polarity, or if they are dual to each other and have the same polarity. Here are two examples: 





(32) 



Note that these are exactly the nets that are obtained via the flow-graph method from the calculus of structures 
derivations in (fT4|) : 




(33) 




This is the second justification for the existence of two-sided proof nets. They are directly obtained via flow- 
graphs from derivations in the calculus of structures. As before, the correctness criterion does not change. 

Note that from the graph-theoretical point of view, there is now not much difference between ®° and > S > *, 
between 0* and > S >0 , between a and a^* , and between a* and a ±0 (at least for MLL~). For this reason, the 
nets in (l32l) could also be written as 





(34) 



Now they are in fact the same net just turned upside down. This is no surprise since the two derivations in (I33| 
are dual to each other. 
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Let us emphasize that it does not matter in which way the graph is drawn on the paper. The net on the 
left in (|32|34| could also be drawn as 




In the case of MLL~ it makes no difference whether one prefers to put a proof net in a "one-sided" (|35|) or "two- 
sided" (|32l34p way on the paper, and whether one prefers to use the labels {•, o} for left/right (or up/down) as 
in (|32]) or to live without them as in (134]) . 

This rather trivial observation can be nailed down in the following theorem which strengthens Theorems 
|2~CT and |2~X2T1 

2.6.2 Theorem Let n, m < 1 and Ai, . . . , A n ,Bi, . . . , B m be any MLL~ formulas. Then the following are 
equivalent: 

(i) There is a sequent calculus proof 

\-Ajr,...,A^,B 1 ,...,B m (36) 

(ii) There is a calculus of structures proof 

Ai>8--->8A^>8B 1 >8...>3B m (37) 

(iii) There is a (two-sided) sequent calculus proof 




A 1: ...,A n h B 1 ,...,B m (38) 

(iv) There is a calculus of structures proof 

Al <g> • • -® A„, 

Bi*8...*gB m (39) 
Furthermore all of (|36p ~ (|39|) can be constructed such that they all yield the same proof net. 

This section can be summarized a follows: Two-sided proof nets are a special kind of one-sided proof nets, 
and one-sided proof nets are a special kind of two-sided proof nets. Whether one prefers the one-sided or the 
two-sided version is a matter of personal taste and also a matter of economics in notation. 

This observation is not restricted to the special case of MLL~. Every theory of two-sided proof nets can 
trivially transformed into a theory of one-sided proof nets, and vice versa. By using polarities as described 
above, the one-sided version can usually be presented in a more compact way than the two-sided version. For 
this reason, we will in the following stay in the one-sided world. 

2.7 Cut elimination 

Let us now briefly discuss an issue that usually excites proof theorists: In a well-designed deduction system, 
every formula/sequent that is derivable, can also be derived without using the cut-rule. Proving this fact is 
usually a highly nontrivial task and involves (depending on the logic in question) very sophisticated proof theory. 

But here we do not have time and space to go into the details of cut elimination and its important conse- 
quences. We discuss here only a very simple logic, namely MLL~, for which cut elimination is easy. For the 
sequent calculus it is stated as follows: 
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2.7.1 Theorem For every proof 



using the rules in (JTJ) there is a proof 

n' 

h r 

of the same conclusion, that does not use the cut-rule. 



Proof (Sketch): We do only sketch the direct proof within the sequent calculus, because, even in the simple 
case of MLL~, carrying out all the details is quite tiresome and boring. But the basic idea is simple: The cut 
rule is permuted up in the proof until it disappears. Most cases are trivial rule permutations similar to the one 
in (|10p . But there are two so called key cases which are not trivial. Here is the first one: 





cut • 




hT,A>9B,A ' \-T',B x <8>A x ,A' ' hr,A,A,r' 

CUt ; : — — CUt ■ 




hr,A,r,A' ~> hr,A,r,A' 

where some instances of the exch-rule have been omitted. The second key case lets the cut disappear when it 
meets an identity rule at the top of the proof: 



id ■ 



h A X ,A 
cut — 





hA x ,T 

The difficult part of a cut elimination proof is usually to show termination of this "permuting the cut up" 
business, which is done by coming up with a clever induction measure. We leave that to the reader. □ 

2.7.2 Exercise Complete the proof of Theorem 12.7. 11 The following things still have to be done: 

1. Find a correct way of dealing with the exch-rule. (Hint: Design a "super-cut-rule", that has exchange 
built in.) 

2. Show the termination of the process of permuting up the cut, i.e., find the right induction measure. 

3. Show that after the termination, the resulting proof is indeed cut-free. 

If you have seen a cut elimination argument before, then this exercise should not be too hard for you. If you 
have never before seen some cut elimination, you will learn a lot about it by doing this exercise. In any case, 
this (rather painful) exercise will help you to admire the beauty of proof nets. 

Let us now turn to cut elimination in the calculus of structures, where it means that not only the cut (i.e., 
the rule if), but the whole up-fragment (i.e., all rules with the f in the name) are not needed for provability. 

2.7.3 Theorem If there is a proof 

{ij,iT,crj,crT,c4,aT ,s} n 



using all rules in Figure [3| then there is a proof 

{i|,(r|,Q:|,s} n 
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that has the same conclusion A and that does not use any up-rule. 

Proof (Sketch): The easy trick of permuting the cut up does not work in the presence of deep inference. For 
this reason completely different techniques have to be used to eliminate the up- fragment. But as in the sequent 
calculus, carrying out all the details is technical and boring. For this reason we will give here only a sketch. 
The first observation to make is that every up-rule 

f S{B±} 
n S{A^} 

can be replaced by a derivation using only i|, if, s, rj,: 

S{B X } 



SUA" 


->$A)i 


85^} 


S{(A" 


-VB)< 




S{A ± 







S{A^} 

This means that only the rule it needs to be eliminated. The second observation is, that this rule can be reduced 
to its atomic version: 

A® A 1 - a <g> a 1 - 
if ~> aif 



S{B*3{A®A^)} S{B^{a®a^)} 

it ^ ait 

S{B} 1 S{B} 

Thi^| is done by systematically replacing 

S{ff'g((A>S>C)®(C ± ®A ± ))} 

if- — by S{BV((A>8(C®C^)®A^} (41) 

S{By(A®A±)} 
S{B} 

Now the rules to eliminate are ait, a T) an d 17 T ( see Exercise 12.7. 4[) H For this, we use Guglielmi's powerful 
splitting lemma, which says that whenever there is a proof 



{i|,cr|,a|,s} J] IT 

S{C>9(A®B)} 

then there are formulas K A and Kb, such that for every formula C , we have derivations 



(42) 



K A *8K B 

{ii, < ri > ai > s}|n 1 , {U^W,s}||n 2 {i|,at,«t,s}|n 3 (43) 

K A ^A K B ^B 



S{C} 

Additionally, we get a derivation 



K A >S K B *8 X 

{i|,^,a|,s}||n 1 (44) 
S{C*3X} 



6 By duality, we can do the same trick to the rule ij.. Compare with what we did in to the id-rule in the sequent calculus. 

7 It might seem silly to first explain that only the rule i| needs to be eliminated, and then say that also the other up-rules need 
to be taken care of. The reason is that with the trick in l|40[l all up-rules can be removed, but by reducing the rule if to it atomic 
version, only some of them are reintroduced. This is crucial for more sophisticated logics than MLL - . 
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for every formula X. The crucial point of this lemma is that it speaks only about the down-fragment. Further- 
more we need a variant of the splitting lemma, which says that whenever we have 

|| a± 
{i|,a|,a|,s} J] II ^ then we also have a[, ot[, s} II n' . 

Now we can remove the rule ai| starting with the topmost instance as follows. What we have is 

{i|,cr|,a|,s} J] II 

ait 

S{B} 

Via the splitting lemma, we can get 

K a ^K a ± II || 

rji „i n , aiirr {'l, <?l, ai, s} n 2 <r[ , a[ , s} n 3 



S{B} 

Now we can get from 1T2 and II3 the following: 



K a *3 a K a ± >8 a A 



now we can build: 



a x a 
{i|,cr|,a|,s} J] n' 2 and cr|, a|, s} || n' 3 



ail 



a v a 

{iW,c*4,s} I n' 2 ^n 3 

{ij.,cr|,aj,s} || 111 

which gives us a proof for S{B} that does not use any up-rules. □ 

2.7.4 Exercise Explain, why not only the rules aif and a], but also the rule a] needs to be eliminated 
after doing (|1T|) . 



2.7.5 Exercise Complete the proof of Theorem 12.7.31 Things that remain to be done: 

1. Show how the rules a] and erf can be eliminated in a similar way as aif. Hint: Use III instead of IT. For 
crt plug in B ® A for X. For a], you need to apply splitting twice. 

2. Prove the splitting lemma. This is the really hard part. Hint: First show the lemma for S{ } = { } 
(shallow splitting). To do so, proceed by induction on the length of n and the size of C ^(A (8) B). Then 
show the lemma for arbitrary context S{ }. For this, proceed by induction on S{ }. 

3. Show that the rule 

A® A- 1 
it 



is not needed for provability, i.e., it is impossible to prove "nothing" . Hint: You need a variant of splitting, 
saying, if there is a proof 

{i|,cr|,a|,s} J] n 
A®B 
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then there are proofs 

{i|,(r|,a|,s} J] n 2 
A 

i.e., S{ }, C, Ka, and ifs are all "empty". 



and 



{ij,erj,aj,s} || n 3 
B 



Proving cut elimination via splitting in the calculus of structures is in the unit-free case a little more messy 
than in the case with units because many cases need to be considered separately that could be treated together 
in the presence of units. 

Let us now see how proof nets deal with the problem of cut elimination. Of course, the main point to make 
here is that cut elimination will become considerably simpler: 

Consider the following reduction rules on pre-proof nets with cuts: 



(45) 



and 






(46) 



2.7.6 Theorem The cut reduction relation defined by (|45|) and (|46[) terminates and is confluent. 

Proof: Showing termination is trivial because in every reduction step the size of the net decreases. For showing 
confluence, note that the only possibility for making a critical pair is when two cuts want to reduce with the 
same identity link. Then the situation must be of the shape: 





A 1 - A A 1 - A 

But no matter in which order and with which identity we reduce the cuts, the final result will always be 




Hcnce we also have confluence. 

However, it could happen, that we end up in a situation like 

A A x 



□ 




cut 



where we cannot reduce any further. That something like this cannot happen if we start out with a correct net 
is ensured by the following theorem, which says that the cut reduction preserves correctness. 
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2.7.7 Theorem Let tt and tt' be pre-proof nets such that tt reduces to tt' via the reductions (|45[) anc? (|46|) . 
J/ tt is correct, then so is tt' . 

Proof: For proving this, let us use the RB-correctness criterion. Written in terms of RB-graphs, the two 
reduction rules look as follows: 



That the first rule preserves RB-correctness is obvious because it just shortens an existing path. For the second 
rule, we proceed by way of contradiction. First, assume that the graph on the right contains an iE-cycle, while 
the one on the left does not. There are three possibilities: 

1. The iE-cycle does not contain one of the new B-R-B-paths. Then the same cycle is also present on the 
left. Contradiction. 

2. The iE-cycle contains exactly one of the new B-R-B-paths. Then, as before, the same cycle is also present 
on the left. Contradiction. 

3. The iE-cycle contains both of the new B-R-B-paths. Then we can construct an jE-cycle on the left that 
comes in at the upper left corner, goes down through the ®-link, and goes out at the lower left corner. 
Again, we get a contradiction. 

That iE-path connectedness is preserved is shown in a similar way. □ 

2.7.8 Exercise Complete the proof of Theorem l2.7.7l i.e., show that if we apply PB"]) to an RB-correct net, 
then in the result every pair of vertices is connected by an jE-path. Hint 1: Note that the two rightmost vertices 
in l|48p must be connected by an iE-path that does not touch the new B-R-B-paths (why?). Hint 2: You will 
need the fact that the first net is also iE-cycle free. 

The important point of Theorem 12.7.71 is that it allows us to give short proofs of Theorems 12.7.11 and 12.7.31 
Let n be a proof with cuts in MLL~ given in the sequent calculus or the calculus of structures. We can translate 
n into a proof net tt, as described in Sections l2.2H2.4l and remove the cuts from the proof net as described above. 
This gives us a proof net tt' , which we can translate back to the sequent calculus or the calculus of structures. 
This works because removing the cuts from the proof net preserves the property of being correct (i.e., being a 
proof net), and translating back does not introduce any new cuts. 

This raises an important question: Suppose we start out with a proof n with cuts in MLL - (given in sequent 
calculus or the calculus of structures). Now we could first remove the cuts as sketched out in the proofs of 
Theorems 12.7.11 and 12.7.31 and then translate the resulting cut-free proof n' into a proof net tt[ . Alternatively, 
we could first translate n into a proof net tt, and then remove the cuts from tt, to obtain the cut-free proof net 
tt' 2 . Do we get the same result? Is tt^ — tt' 2 1 

The answer is of course yes. To see this, note that the cut reduction steps in the sequent calculus either 
preserve the proof net (if the cut is just permuted up via a trivial rule permutation) or do exactly the same as 
the cut reduction steps for proof nets. 

The same is true for the calculus of structures. The proof of the splitting lemma is designed such that it 
preserves the net. To make this formally precise would go beyond the scope of these lecture notes, but by 
comparing Figures [7] and [8] the reader should get an idea. 

We can summarize this by the following commuting diagram: 



(47) 



and 




(48) 



proof with cuts 
(in SC or CoS) 



proof net with cuts 



cut elimination 



cut elimination 
(in proof nets) 



(in SC or CoS) 



cut-free proof 
(in SC or CoS) 



cut-free proof net 



(49) 
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Our basic introduction into the theory of proof nets for MLL is now finished. However, a very important 
and fundamental question has not yet been mentioned: 

2.7.9 Big Question Let tt and tt' be two proof nets such that tt' is obtained from tt by applying some cut 
reduction steps. Do tt and tt' represent the same proof? 

By comparing and ([9]), one might be tempted to say no. But by looking at Figures [3] and [3 one is 
tempted to say yes. Furthermore, from the viewpoint of proof nets it makes no difference, whether we eliminate 
the cut from 

nTT" ^\rb 




h A ± ,C 

in the sequent calculus or whether we perform the the composition 

III J] A 

B -> |. 

n 2 J c 

c 



in the calculus of structures (no matter whether we use one-sided or two-sided proof nets, cf. Section |2^6|) . 

In the following section we are going to give another justification for the "yes" , which is independent from 
proof nets, sequent calculus, calculus of structures, or any other way of presenting proofs. 



2.8 *-Autonomous categories (without units) 

In this section we will introduce the concept of *-autonomous categories. We do not presuppose any knowledge 
of category theory. We introduce what we need on the way along. It is not much anyway. The basic idea is to 
give an abstract algebraic theory of proofs, which is based on the following postulates about proofs: 

(i) for every proof / of conclusion B from hypothesis A (denoted by / : A — > B) and every proof g of conclusion 
C from hypothesis B (denoted by g: B — > C) there is a uniquely defined composite proof go f of conclusion 
C from hypothesis A (denoted by g o / : A — > C) , 

(ii) this composition of proofs is associative, 

(iii) for each formula A there is an identity proof 1a- A — > A such that for / : A — > B we have fol^ = f = ls°/, 
i.e, it behaves as identity w.r.t. composition. 

These axioms say no more and no less than that the proofs are the arrows in a category whose objects are the 
formulas. Let us now add more axioms that are specific to logic and do not hold in general in categories: 

(iv) Whenever we have a formula A and formula B, then A®B is another formula. For two proofs f;A—>C 
and g : B — > D we have a uniquely defined proof / ® g : A® B — » C ® D, such that for all h: C — > E and 
k: D — > F, we have 

{h®k)o(f®g) = (ho f)®{hog): A®B ^ E®F . (50) 

Using category theoretical language, Axiom (fry)) just says that <g> is a bifunctor. What does this mean? Consider 
the following two derivations (using the notation from the calculus of structures): 



A®B A®B 
/<g>B| A®gj 

C®B and A®D (51) 

C®gj 

C®D C®D 
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In the left one we use first / to go from A to C, and do nothing to and then use g to go from B to D 
(and do nothing to C). In the right derivation, we first use g to go from B to D, and then / to go from A to 
C. Equation ([50]) says that the two derivations with premise A® B and conclusion C ® D in (|5Tj) represent the 
same proof, denoted by f ® g. Mathematicians came up with a very clever way of writing an equation between 
objects as in (|51[) . namely, via commuting diagrams. Instead of writing the two derivations in (|5ip and saying 
they are equal, we write: 



The diagram 



A®B- 
C®B- 



A®D 
C®D 



commutes 



From the proof theoretical viewpoint, this equation is indeed wanted. The difference between the two derivations 
in (|5ip is an artefact of syntactic bureaucracy. The kind of bureaucracy in exhibited in (|5ip is called bureaucracy 
of type A. This implies that there must also be a bureaucracy of type B. Consider the following two derivations: 

A®(B>SC) 
f®{B*8C) [J 

A'®{B*gC) 
S (A'®B)^C 

In the left one we first use the proof /, taking us from A to A 1 (and doing nothing to B and C), and then we 
apply the switch rule. In the derivation on the right we first apply the switch rule, and then do /. Clearly the 
two are essentially the same and should be identified eventually. Let us write this as commuting diagram: 



and 



A®{B^C) 
S {A®B)>SC 
(f®B)>$C II 

(A'®B)*8C 



(52) 



A®(B^C) - 

f®(B«8C) 

A'®(B^C) 



■(A®B)^C 
{A'®B)^C 



(53) 



Using category theoretical language, equation ([5*3")) says precisely that the morphism s^^^: A®{B > S C) — > 
{A ® B) 'S? C is natural in A. Of course, in the end, we should have that switch is natural in all three arguments. 

Before we can continue with our list of axioms, we need another category theoretical concept. Suppose we 
have two formulas A and B and proofs / : A — > B and g : B — > A. If we have for some reason that fog — Is 
and go f = 1^, then we say that A and B are isomorphic. In this case / and g are isomorphisms. The following 
axiom shows two examples: 

(v) For all formulas A, B, and C, we postulate the existence of proofs 

a A B c ■ A ®{B ®C) (A®B)®C 

(54) 

o~ a.b • A®B^B®A 

8 More precisely, it is the identity lg taking us from B to B. 
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which are isomorphisms, and which are natural in all arguments]^) and which obey the following equations: 

A ® OJ O D 



A®(B®(C®D)) 



A®({B®C)®D) 



OLA,B,C ® D 



(A®B)®(C®D) 



{A®(B®C))®D 



A®(B®C) 



({A®B)®C)®D 

A ® <jb,c 



A®{C®B) 



{A®B)®C 

A B,C 

C®(A®B) — *- (C®A)®B 



(A®C)®B 

<JA,C ® B 



(55) 



(56) 



A® B 




B® A 



(57) 



What we have defined so far, could be called a symmetric monoidal category without unit. This terminology 
is not standard, because the notion has not much been used in mathematics. What is standard is the notion 
of monoidal category and symmetric monoidal category (the first one being without the er), which additionally 
have a distinguished unit object 1 and natural isomorphisms : 1 ® A — » A and qa '■ A ® 1 — > A obeying the 
equations » „ t-a q a,i,b r a ~ * \ ~ r> - . °X-a 



A®(1®B 




(A®1)®B 1®A 
and 



A®1 



(58) 



A®B 



A 



An important property of monoidal categories is MacLane's coherence theorem. Stated in terms of proofs, 
it says the following: 

2.8.1 Theorem Let n > 1 and A±, . . . , A n be formulas. Now let B and C be formulas built from A\, . . . , A n 
by using ® such that every Ai appears exactly once in B and C. If Axioms (0-jvj) hold, then all proofs from 
B to C formed with the available data are equal. This proof always exists, is an isomorphism, and is natural in 
all n arguments. 

We will not give a proof here. 

For being able to really speak about logic and proofs, we need negation, which is introduced by the following 
axioms: 



9 At this point you should start to see why it makes sense to use the category theoretical language. Without it, we would have, 
for example, to postulate for all formulas A, B, and C another proof oT^ B c such that the two derivations 



A®{B®C) 

a A,B,C || 

(A®B)®C and 

a A,B,c I 
A®{B®C) 



{A®B)®C 

Q A,S,C || 

A®{B®C) 

a A,B,C J] 

{A®B)®C 



are both doing nothing (i.e., are equal to the identity proof). Furthermore, we would need a lot of equations in the form of (55) , 
in order to express the naturality. 
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(vi) For every formula A there is another formula A , and for every proof /: A — > B, there is another proof 
f x : B x — > A x such that 1^ = 1 A ± : A 1 - -> ^ and such that (.9 o J) 1 - = o g 1 - : C 1 - -> A 1 - for every 
/ : A -> B and g : B -> C. 

(vii) For every formula A and proof f : A ^ B we have that A- 1 - 1 = A and / = /. (More precisely, the 
mapping A x± — > A is the identity on A). 

Spoken in category theoretical terms, Axiom (jvT| says that (— ) ± is a contravariant endofunctor. With this, 
we can define the 1? via A'g B = (A 1 - QB- 1 )- 1 . Axiom (|vii|) says that if we flip around a derivation twice, we 
get back where we started from.0 It also allows us to conclude that the *g that we just defined has the same 
properties as postulated for the ® in ([Iv]) and |jvj), i.e., it is a bifunctor and carries a monoidal structure (without 
unit). 

2.8.2 Exercise Formulate the statements of Axioms (fry)) and (jvj) for the 1? defined via A*8 B — (A 1 - <g) -B ) , 
and show that they follow from (jr])- (|vii[) . 

Before stating our final postulates about proofs, let us introduce the following notation. For two formulas 
A and B, we write Hom(^4, B) for the set of proofs from A to B, and we write h}{B) for the set of proofs of B 
that have no premise F*l 

(viii) For all formulas A, B, and C, there is a bijection 

tp: Hom(A®B,C) -> Rom(A, B x >9 C) (59) 
which is natural in all three arguments. 

(ix) For all formulas A and B, we have a bijection 

ip : h 1 (A 1 - *8 B) ^> Hom(A, B) (60) 
which is natural in both arguments and respects the monoidal structure. 



In the case with units, Axiom (jviiip would complete the definition of a *- autonomous category. It essentially 
says that we are allowed to do currying and uncurrying. To see this, note that linear logic knows the connective 
— o, standing for linear implication, defined via A — o B = A 1 - *8 B\ 12 \ Equation (|59p now says that we can jump 
freely back and forth between proofs A® B ^ C and A — > B — o Cl 13 l 

Since we do not have units, we also need ([Ix]), which says that the proofs of A — o B are the same as the 
proofs A — > B. To be precise, we need to give additional equation saying that h 1 is a functor, i.e., every proof 
/: A — > B is mapped to a function /i 1 (/) : /i 1 (A) — > h}-(B) such that composition and identity are preserved. 
Furthermore, the h 1 needs to go well along with the monoidal structure, to say what that means exactly would 
take us too far astray. But to give you an idea of the problem, let us figure out how we could construct a proof 
B — > (A*8 A- 1 ) <&B, corresponding to the rule ij in Figure [5l by using the axioms (|I|)- (px|) . If we had a unit 1 
together with the equations (|58p. then it would be easy: we could start out with : 1 ® A — > A, apply (|59[) to 
get 

X A = (p(X A )- 1 -»• A^A 1 - 

By (|iv]l. we can form a proof Aa ® Is : 1 ® -B — * (A'SA 1 ) ® i?. We can precompose this with A^ 1 : B — > 1 ® B, 
to get 

(Aa ® Is) o A^ 1 : S (i4 >S A x ) ® B 

Constructing this map without using the unit requires heavy category theoretical machinery that we are not 
going to show here. See Section [231 for references. 



10 What we impose here is also called strictness, and does usually not hold. For example, the double dual of a vector space is 
usually not the space itself. Even in the finite dimensional case we only have a natural isomorphism between A and A . 

llr The reason for this notation is the following: Hom(j4, B) is in fact the value of the functor Hom(— , — ) in two arguments. The 
functor Horn (A, — ) in one argument is also written as h ■ If there is a proper unit 1 then the proofs of A are the elements of the 
set Hom(l,j4), i.e., h 1 is a functor mapping every formula to its set of proofs. In h 1 , the unit is virtual. 

12 As in classical logic, "A implies B" is the same as "not A or B" . 

13 If you have never seen currying, think of a function / in two arguments, denoted by /: A X B — * C. This is essentially the same 
as a function /' : A — > B — * C, taking and argument from the set A and returning a function B — » C which asks for an element of 
B to finally return the result in C. 
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2.8.3 Exercise We mentioned switch in ([52]) and (|53| but we did not postulate it in @-((Ix|. In this exercise 
you are asked to construct sa,b,c- A®(B*3C) — + (A*g B)®C, corresponding to the switch rule in Figure El 
by using (fij)- (|viiijl . Hint: Start with the identity B®C — > B®C and apply ([59]) . You will also need the 
associativity of *g that you have constructed in Exercise 12.8.21 

The wonderful point of Axioms ©-fix]) is that they precisely describe the mathematical structure spanned 
by cut-free proof nets for MLL~. This means two things: 

First, the proof nets for MLL~ that we discussed in the previous sections form a category: The objects are 
the formulas and the maps A — > B are the cut-free proof nets with conclusion h A 1 - , B £j and the composition 
g o f of two maps / : A — > B and g : B — > C is defined by eliminating the cut from 



cut ■ 




h A ± ,C 

In the calculus of structures, this corresponds to performing the composition 

.4 

|| A 
B -> |. 

I C 
C 



It is easy to verify that this category denoted by PN, obeys ©— (HxJ) (where h?-(A) is just the set of cut-free 
proof nets with conclusion A) . 

Second, the the category PN is the free category with this property. This means that whenever there is a 
category If, obeying (JU)— ((IxJ), then there is a uniquely defined functor (i.e., map that preserves all the structure 
defined in ©-(JSI)) fr om PN to c £ . 

2.8.4 Theorem The category of cut-free proof nets for MLL - , with arrow composition defined by cut elimi- 
nation, forms the free *-autonomous category without units (generated from the sets/ of propositional variables). 

Another way of seeing this is that we can trivially translate proofs in the sequent calculus or the calculus of 
structures into the free ^-autonomous category (without units), by simply following the syntax. Theorcm l2.8.4l 
says, that if we do this to two proofs III and 1I2, we get the same map in the category, if and only if IT and II2 
yield the same proof net after cut elimination. 

In other words, if you have no objections against any of the Axioms (|I|)-(jixj). you must answer the Big 
Question 12.7.91 with yes. 

But there is also a but: Let us emphasize that this yes is valid only for MLL~. What we have said in this 
section does not allow us to draw any conclusions about any other logic. 



2.9 Notes 

As already mentioned in the introduction, the terminology of "proof nets" and "bureaucracy" is due to Girard. 
He introduced proof nets along with sequent calculus presentation for linear logic in |Gir87j . He essentially 
followed Ideologv l2.2.1l for obtaining his proof nets. The terminology "coherence" is due to MacLane. In [Mac63j 
he proves the "coherence theorem" for symmetric monoidal categories. See also |Mac71j . The concept of 
coherence graph is based in the work of Eilenberg, Kelly, and MacLane [EK66, KM7Tj, who also provided the 
acyclicity condition and observed that it is preserved by composition, i.e., cut elimination. The observation that 
cut elimination is composition in a category is due to Lambek Lam68, Lam69 . The terminology "flow-graph" 
is due to Buss |Bus91j Fl 

The calculus of structures has been discovered by Guglielmi |Gug02| , who initiated the systematic proof 
theoretic investigation of the concept of deep inference. For more details on this sec GS01 , BT01 , Str03a. Brii03 . 

14 Or, equivalently, the two-sided proof nets where A has polarity • and B has polarity o. 

15 Strictly speaking, coherence graphs and flow graphs are not the same thing. But in the simple case of MLL - , the two notions 
coincide. 
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The notion of "correctness criterion" is also due to Girard. In Gir87] he gave the "long-trip-criterion" that 
we did not present here. The splitting tensor theorem (our Lemma 12.5. 6j) also first appeared in |Gir87j . The 
proof given in Section 1231 follows the presentation of Bellin and van de Wiele in BvdW95], who also give a 
proof of Thcorcm l2.2.3l and discuss in more detail the relation between proof nets and trivial rule permutations. 
Another well- written short discussion on this issue can be found in |Laf95j . Our second proof of Theorem 12. 5. 51 
(i.e., the one using the calculus of structures) follows the presentation in |Str 03a . However, the result is already 
implicit present in the work of [DHPP99] and |Ret97j . A different way of proving Theorem [233] via the calculus 
of structures is presented in |Joi06j . 

The switching criterion (Definition 12.5.41 and Theorem I2.5.5|) is due to Danos and Regnier DR89 . For this 
reason the switching criterion is in the literature also called Danos-Regnier-criterion or DR-criterion. However, 
the contraction criterion is also due to Danos and Regniei0 and should therefore also be called DR-criterion. See 
|Moo 02, PuiOl for a more recent investigation of the contraction criterion. That (a version of) the contraction 
criterion can be checked in linear time in the size of the net has been discovered by Guerrini [Gue99j . The 
RB-correctness criterion has been found by Retore [Ret93| IRet99a| IRet03] , who provided a detailed analysis of 
proof nets using RB-graphs in various forms. 

The concept of two-sided proof nets must be considered as folklore. In several early papers on proof nets 
the possibility of a two-sided version is mentioned, but the details are never carried out because the one-sided 
version is more economic. In the literature, two-sided proof nets are used when for some reason the authors 
want to avoid the use of negation (e.g., [BCST96, FP04]). The concept of polarities has to be attributed to 
Lamarche (e.g., |Lam95j ). In [LamOl] he develops the algebraic theory of polarities and structural contexts in 
full detail. 

The notion of cut elimination has been developed by Gentzen |Gen34[ IGen35j . For a variant of linear logic 
it has first been proved by Lambek [Lam58j . For full linear logic (sequent calculus and proof nets) it has been 
proved by Girard [Gir87j . For linear logic presented in the calculus of structures, the first direct proof of cut 
elimination was also based on rule permutation (similar to the sequent calculus) |Str03a|, IStr 03b] . The idea of 
using splitting as sketched in the proof of Theorem l2.7.3l is due to Guglielmi |Gug02| . 

*- Autonomous categories have been discovered by Barr |Bar79j . That there is a relation to linear logic was 
discovered immediately after the introduction of linear logic (see, e.g., |Laf 88 , Sec89 ). Blutc Blu93] was the 
first to note that the category of proof nets is actually the free *-autonomous category without units. However, 
no complete proof was given; there was no proper definition of a *-autonomous category without units. That 
there is in fact a non-trivial mathematical problem to give such a definition was observed only 12 years later, 
but then by three research groups independently at the same time LS05a. DP05, HHS05 (see also Sections 13.51 
and !5.ip . The most in-depth treatment is HHS05 . We used here the notation of |LS05a| . 

The terminology of "Formalism A" and "Formalism B" is due to Guglielmi Gug04a. Gug04b|. See also 
|Hug04[ IMcK05| IStr05a| IStr 05b| for the relation between deep inference and category theory. 

3 Other fragments of linear logic 

In this section we will very briefly inspect how proof nets for larger fragments of linear logic look like. We will 
first look at the so-called exponentials (which are modalities) and the additives (which are a second pair of 
conjunction/disjunction). Then we will go back to the purely multiplicative fragment and play with variations 
of it. 

3.1 Multiplicative exponential linear logic (without units) 

The formulas of unit-free multiplicative exponential linear logic (MELL - ) are generated by the syntax 

& ::= sf | stf 1 - | & *g & \ & ® J? | W \ ?J? 

where everything is as in Section |2~T1 The modalities are dual to each other: 

(L4)- 1 = 1A 1 - {1A) 1 - = IA 1 - 

The inference rules in the sequent calculus are the same as in (fTJ plus the ones for the new modalities: 

FT h?A,?A,T hi,r h A, IBu • • • , ?-B„ 

?c ■ — ?d - — ! - ■ — (61) 



\-ia,t h?4,r h?^,r \-\A,w 1 ,...,iB n 



1B It first appears in Danos' thesis IDan90l . but he insists that it is joint work with Regnier. 
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Figure 10: From sequent calculus to proof nets: exponentials 



where in the !-rule n > 0. In Figure [TOl we show how these rules are translated into proof nets according to 
Ideology 12.2.11 This is exactly the way how Girard introduced them in [Gir87j . Note that for dealing with the 
!-modality, we do not exactly follow Ideology |2.2.11 Instead, the concept of box around a proof net is introduced. 
Such a box always has a main door, the formula \A, and auxiliary doors, which are all occupied by ?-formulas. 

The correctness of such a proof net with boxes is defined as in Section 12.51 (?c behaves as > S > ) with the 
difference, that each box has to be treated separately. However, the correctness criteria do only work if no 
instance of ?w is present 

Cut elimination is not as simple as for MLL~. There arc now not only more reduction rules, we also have 
the problem that showing termination is no longer trivial because the size of the net can increase during the 
reduction process. This is due to the presence of contraction. In the sequent calculus, the problematic case 

17 There is a general problem with multiplicative proof nets when some form of weakening is around. We come back to this in 
Sections 13.51 and 15.11 
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appears when 




. . , \-A,?B 1 ,...,?B n 

cut 

h r, . . . , w n 



is reduced to 




cut ■ 



hr,?A?^4 HA?B b ...,?s„ 




\-r,?A,W 1 ,...,W n h!A?Bi,-,?B n 

CUt „ hr,?B 1 ,...,?B„,?B 1 ,...,?B„ 
re 



i-r,?fli,...,?fl n 



where the proof II2 has been duplicated. In terms of proof nets, this means that the whole box with 7T2 inside 
is duplicated. 

3.1.1 Exercise Visualize this reduction in terms of proof nets by using the translation of Figure [TOl 

In spite of this nasty behavior, we have the following theorem, which we are not going to prove her. The 
interested reader is referred to |Gir87[ IDan90[ IJoi92| . 

3.1.2 Theorem Cut elimination for MELL - proof nets is terminating, confluent, and preserves correctness. 

So far, there are no proof nets for MELL - that follow Ideologv l2.3.11 One of the reasons might be that the 
sequent calculus rules in (|6ip do not allow to properly trace the modalities in the derivation. However, in the 
calculus of structures, this becomes very natural (see Str03a, Str03bl rGS02j ). 

3.1.3 Open Research Problem Find for MELL - a notion of proof nets without boxes, that is based on 
Ideology E3U 

3.2 Multiplicative additive linear logic (without units) 

Let us now turn to unit-free multiplicative additive linear logic (MALL - ). The formulas of MALL - are generated 
by the syntax 

& ::= #? \ sf^ \ & 1% & \ & ® & \ & @ & \ & 
where again everything is as in Section |2~T1 The two new connectives are dual to each other: 

(A & B) 1 - = B 1 - © A 1 - (A © B) 1 - = B 1 - & A 1 - 

The inference rules in the sequent calculus are the same as in ((T|) plus the ones for the new connectives: 

h A,T hB,T hi,r hB,T 

& \- a&b,t 5)1 hi ffl5 ,r ^Ta^F (62) 

In his first proposal for proof nets for MALL - , Girard [Gir87j used boxes (as for the exponentials). The problem 
with this approach is that it distinguishes between the two proofs 

hA,c,r hi,D,r h b,c,t hs,D,r (63) 



\-a,c&d,t hB,C&D,T 
h A&B,C&D,T 
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and 



hA,C,T hB,C,T 



&■ 



hA&B,C,r 



\-A,D,T hB,D,r 
\-A&B,D,T 



(64) 



h A&B,C&D,T 



In his second proposal Gir96j, Girard proposed the notion of monomial proof nets (still following Ideol- 
ogy [272TT]) , where he introduces the notion of slice and attaches a monomial (boolean) weight to the identity 
links. 

Here we will sketch a very recent proposal by Hughes and van Glabbeek [HvG03j , which follows Ideologv l2.3.1l 
Remember that in Section l2~3l we observed that the additional graph structure that captures the essence of the 
proof for MLL~ consist of a linking, which is just a pairing of dual atom occurrences. 

The discovery of Hughes and van Glabbeek was that for MALL - , this additional graph structure is a set of 
Unkings, where a linking is again, simply a pairing of dual atom occurrences. But this time, a single linking 
need not to be exhaustive (i.e., it does not necessarily pair up everyone). 

We can extract the proof net from the sequent calculus proof in the same way as in Section 12.31 But when 
we encounter a &-rule, we have to separate the two linkings of the two branches, and we have to keep track of 
which pairing belongs to which linking. Figure [Tl] shows an example (taken from [HvG03j ) where we do this by 
choosing different line style/colors. 

In |HvG03j . Hughes and van Glabbeek provide a correctness criterion and a cut elimination that preserves 
the correctness. Part of the correctness criterion is that each linking itself has to be multiplicatively correct (in 
the sense of Section |2~5|) . Unfortunately, we do here not have time and space to go into the details. However, 
from the viewpoint of the identity of proofs, there is an important observation to make about these proof nets: 
The following two sequent proofs are mapped to the same proof net for all possible Hi, II2, and n^: 





(65) 



h r, A,C<g>D, A 



h T,B,C®D,A 



\-T,A&B,C®D,A 




&■ 



T,A,C hr,5,C \y (66) 



hr,A&B,C h £>, A 

h r,A&B,C®D,A 



In other words, the proof nets identify the two sequent proofs (|65j) and (|66|) . Is this wanted from the proof 
theoretical perspective? At the current state of the art there is no definite answer. 

An important point against the identification is that in (|65|) the subproof n3 appears twice, while in (|66[) it 
appears only once, which means that with the identification of (|65[) and (j6"6"|) it becomes difficult to speak about 
the size of proofs. 

An important point in favor of the identification comes from algebra, where adding the connectives & and 
© means adding cartesian products and coproducts to the axioms of ^-autonomous categories. If we want that 
& behaves as cartesian product in our category of proofs, we have to identify (l65|) and (|66|) . 

Maybe in the end both worlds have their right to exist. In any case, the observation above leads to the 
following: 

3.2.1 Open Research Problem Find for MALL - a notion of proof nets that does not identify (|65[) and (|66p. 

A good starting point could be to consider flow-graphs in the calculus of structures for MALL (see [Str02 , Str 03aj V 
Of course, the problem is to find the right correctness criterion and the right notion of cut elimination. 
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Figure 11: From sequent calculus to MALL proof nets via coherence graphs 



3.3 Intuitionistic multiplicative linear logic (without unit) 

Formulas of intuitionistic multiplicative linear logicF^I without unit (IMLL~) are generated by the syntax: 

& :;= s# \ & ^> & \ &®& (67) 

18 This is the logic that Kelly and MacLane studied in their seminal paper K M71I . Of course, they did not use that name. But 
they did have the correctness criterion of proof nets, called coherence graphs. They only had the acyclicity condition and not the 
connectedness condition because the unit was present. They proved their results via cut elimination (they used that terminology). 
They even envisaged the notion of polarity. 
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Note that there is no 1? and no ■ ± . The sequent calculus for IMLL is usually given in two-sided form: 

cut ■ 



av- A r,r'hc 

T,B,A,T' h C 
exchL ■ 



T,A,B,T' h C 



T,A,BhC ThA r'hB 

1R- 



(68) 



T 1 A®B^C T,T'\-A®B 
>L : - -^>R- 



r,r',4^.BhC rhi^B 

Note that the right-hand side of each sequent contains at most one formula. Apart from that, the rules are 
exactly the same as in (1271) . We can therefore simply take our notion of two-sided proof nets from Section 12.61 
The correctness criterion remains unchanged. This can be used to prove that IMLL - is a conservative extension 
of MLL - , i.e., an IMLL - formula is provable in IMLL - if and only if it is provable in MLL - F^1 

We can use polarities to provide a one-sided version of proof nets for IMLL - . For this we define the set of 
negative and positive formulas as follows: 

J?* ::= | & % ®&° | J?' 

(69) 

&° ::= | | | ,^'*3& 

We can now define a proof net for IMLL - to be a proof net for MLL - in which at most one of the conclusions 
is in J^"° and all other conclusions are in , See [LR96] or |Lam01| for further details. 

3.4 Cyclic linear logic (without units) 

In Section |2~T1 we defined sequents to be lists of formulas, but we also had the exchange rule which made the 
order of the formulas irrelevant for provability, and indeed, the two connectives f? and ® were commutative. 
In this section we discuss what happens if we drop the exchange rule. As expected, the two connectives >§> and 
® will lose their property of being commutative, and we enter the realm of non-commutative logics. But not 
everything works as one might expect... 

Recall that in Observation 1 2 . 3 . 2"! we noted that in the proof nets we always get a crossing of edges when we 
apply the exchange rule. Let us hence change the correctness criterion. We keep everything as in Section l2~5l but 
we add as condition that there must be no crossing of edges in the proof net (in graph theoretical terminology: 
the graph has to be planar). Hence, our running examples from Sections 12. 21 - 12. 4| are not correct in the sense of 
this new criterion. And indeed, we used the exchange rule in all sequent proofs. 

Luckily, there is another proof net for our favorite sequent in which there are no crossings: 



(70) 




It clearly obeys the correctness criterion. 



3.4.1 Exercise Give a sequent calculus proof in the system in JT]) that translates into the net (|7D|) . Then 
try to find such a proof that does not use the exchange rule. 

Here we are in for a surprise. It is very easy to find a sequent calculus proof for (jT0"|) , but it is impossible to 
find one that does not use the exch-rule. What went wrong? 



19 This is not true for full intuitionistic linear logic with respect to linear logic. Also classical logic is certainly not a conservative 
extension of intuitionistic logic, since there are formulas, like Peirce's law ((A — > B) — ■> A) — » A) that are provable in classical logic, 
but not in intuitionistic logic. 
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There are two explanations. The first is based on the following observation. If we have a planar proof net, 
i.e., a list of formula trees together with a perfect matching of their atom occurrences such that there is no 
crossing among the links that connect the atoms, then we can from that data not tell a priori which formula is 
the first in the list. Wc have to think of the formulas to be grouped in a cycle around the graph with the axiom 
links. We now have to think of a proof net not as something like 

r ^ 

7T 

Ax A 2 A 3 A4 A 5 A 6 

I I I I 



but as something like 




To go along with this behavior, we cannot just drop the exchange rule, but have replace it by the cyclic exchange 
rule: 

h r,A 

eye I 

y h A,T 

where T is an arbitrary list of formulas. This is also the reason why the name cyclic linear logic has been chosen 
for this logic. It has been investigated in detail by Yetter |Yet90j . 
We can now give a sequent proof that translates into J7D|) : 



cycl 



j3> 



h a, a 

h a ± ,a®a,a>8(a ± (gia 1 - 
h a 1 - >g(a ® a), a ^(a 1 - (g> a 



-) 




But there is still this disturbing fact that there are crossings in the flow-graph but no crossings in the net. 

This leads us to our second explanation: The sequent calculus is simply too rigid to fully capture the 
phenomenon. Recall that in Observation 12.4.41 we noted that in the calculus of structures we can provide a 
derivation such that crossings appear in the flow-graph only if they also appear in the net. This means we 
should now be able to come up with a derivation that has no crossings in the flow-graph, and hence does not 
need the exchange rule nor a cyclic replacement. Of course, we need to adapt the system a little bit: we need 
another version of ij, and if, namely the one in <| 1 3|) and we need two versions of switch. Note that since we 
do not have crj. nor a] , we cannot generate the different four versions of switch as in (| 12(1 . The new system is 
shown in Figure [12] (both versions of switch are self-dual) . 

Here is now our favorite example without crossings: 



a 1 - >S a 
a^*8{a®{a*3a^)) 




That deep inference is powerful enough to get rid of the cyclic exchange rule has first been observed by Di Gi- 
anantonio DG04]. But he did not use proof nets to show this fact. 
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S{B) 
S{{A ± *8A)®B} 

S{B] 
S{B®(A ± *8 A)} 

S{A*8{B^C)} 
[ S{(A>%B)>gC} 



A® A- 1 
it 



S{(A®A ± )>2B} 



S{B} 




S{BV{A® 




S{B} 




S{A®(Bd 





S{(A®B)®C} 



S{A®(B^C)} 
S{{A®B)>3C} 

S{{A>SB)®C} 
S{A*8{B®C)} 



Figure 12: A system for cyclic MLL in the calculus of structures 



By combining the last two sections, i.e., proof nets for cyclic linear logic and intuitionistic linear logic, we 
can obtain proof nets for the Lambek calculus [Lam58j. We leave the details as an exercise. The interested 
reader is referred to [LR96] or |Lam01j . which contain a systematic treatment. 

It is also possible to combine usual commutative MLL~ and cyclic MLL~ together in a single system. Then 
there is a par/tensor pair which is commutative and one which is non-commutative. This is done in [AROO . 

3.5 Multiplicative linear logic with units 

Let us now finally discuss the problem of the units. We stick to the multiplicative fragment of linear logic. The 
formulas of MLL are generated by 

#•;:= \ \ ,^ ^ ,^ \ ,^ ® ,^ \ ± \ 1 
where again everything is as in Section [2.11 The two units are dual to each other: 

± ± = 1 l x = ± 

The inference rules in the sequent calculus are the same as in ^ plus the ones for the units: 

h r, A 

J. - 1 (71) 

hr,i,A hi y ' 

If we now follow the argumentation of avoiding trivial rule permutations as in (|10j) , we have to identify the 
following three derivations in the sequent calculus: 

T,A T,A B, A B,A 

-L r ® : : _ -L • 



±,T,A B, A < — > T 7 A®B,A < — > T, A _L, B, A 

® ±,T,A®B,A ±,T,A®B,A ® ±,T,A®B,A 

because they are obtained from each other by permuting the _L-rule under and over the (g>-rule. Furthermore, 
following the equations that are imposed on proofs by the axioms of *-autonomous categories (with units) these 
three proofs have to be identified. 

However, if we follow the idea of having a graph as proof net, we have to attach the _L somewhere. But there 
is no canonical place to do so. This is explained in further detail in |LS06j . That there is this problem with the 
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±-rule,and in fact with every kind of weakening rule has already been observed in |Gir87[ ILaf951 IGir96j and 
others @ 

The solution to the problem is instead of considering graphs as proof nets, to consider equivalence classes of 
such graphs. There are now three different proposals in the literature to do so. In [BCST96J the authors use a 
two-sided version of proof nets and attach the _L to the edges in the graph (see also Section |5TT|) . We will show 
here the approach taken by [SL041 ILS06j which clearly follows Ideology 12.3.11 The additional graph structure 
attached to the sequent forest does no longer consist of only the identity links, but of another formula tree. 
Then the resulting graph behaves as ordinary unit-free proof net and obeys the usual correctness criteria. The 
basic idea is the following. The ordinary proof net 




\/ 

<8> 



is now written as 

>8 



A 



b b 1 - 



i.e., the identity links are replaced by ®-nodes which are connected by a 1?o If we now have to attach a _L, we 
attach it via a ® to the root of linking tree of the proof to which we apply the _L-rule. Figure fT3l shows three 
examples. Since all three of them are the same proof according to what has been said above, we have to put 
them in the same equivalence class. To achieve this, we consider linking trees equivalent modulo the following 
equation: 





(72) 

/\ \ 

JL P Q 

provided going from right to left in l|72p does not destroy the correctness! 22 ! 

The details of this kind of proof nets are carried out in [SL041 ILS06j , where it is also shown that they form 
the free ^-autonomous category (in the usual sense, with units). 

Let us note here only that the linking tree of an MLL proof net can be seen as the up-side in a two-sided 
unit-free proof net, as we discussed it in Section |2.6[ provided we read the units _!_ and 1 as ordinary atoms. 
Here is an example: 




20 To be precise, one should note that the problem has already been noted in IKM71| . 

21 If there are more than two axiom links we either use n-ary 1? or take the equivalence class modulo associativity and commuta- 
tivity of *3 in the linking tree. This is not problematic since we have to take equivalence classes anyway. 

22 Observe that going to left to right cannot destroy correctness because this corresponds to an application of the switch rule in 
the calculus of structures, which always preserves correctness (see second proof of Theorem l2, 5.51 1. 
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h a, a 1 - 
_L - r id- 

h _L, a, a 



h 6, 6 J 



h _L,a,a ± ®&, 6 J 



/ \ 

/ ® ® 

1 a a- 1 - / 
\ / 



id 



h a, a 



id 



h 6, 6- 1 



h a, a- 1 ® 6, 6 X 



_L 




id 



id 



\-b, b ± 



ha, a 1 - hM" 1 ,! 
h 0,0^ ®6, b x ,± 



/ 

® ® 
\ / 



Figure 13: From sequent calculus to MLL proof nets with units 



An alternative approach to the problem of the units has recently proposed by Hughes. In Hug05b| he 
defines a notion for proof nets for MLL (also following Ideology 12. 3. lj) where he attaches the _L to some atom 
in the proof. This has the advantage that there is no need to consider equivalence classes of proof nets for 
defining cut elimination. However, for constructing the free *-autonomous category he also needs equivalence 
classes H ug05a| . 

3.5.1 Open Research Problem Find for a notion of proof nets that is also able to accommodate the 
additive units T and of linear logic. 

3.6 Mix 

In order to avoid the problems with the units, one can simply ignore them, as wc did in the whole first part of 
these notes. An alternative is to add the rules 

h r h a 

mix and mixn — (73) 

hr,A h v ' 

called mix and miliary mix. Adding these two rule to {1} or (TTj) + (|7ip is equivalent to saying that _L — 1. By 
doing this, the correctness criteria shown in Section [2.51 change only slightly: The acyclicity condition remains, 
but the connectedness condition has to be dropped. A detailed analysis for this can be found in [FR94J. 

3.7 Pomset logic and BV 

Before we leave the realm of linear logic, let us show another variation, which has a particularly nice theory 
of proof nets. It has been introduced by Retore |Ret97] under the name pomset logic. The set of formulas is 
generated via 

^ ::= £/ \m/ ± \ \ \ ^ 
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Negation is defined as in Section [2TT1 The new connective <3 is non-commutative and self-dual, i.e., 

(A<B) X = A X <\B X 

We will also allow to write A > B for B < A. 

For defining proof nets we use Retore's RB-graph presentation. The >§, the (£>, the cut and the identity are 
translated into RB-graphs as in Section 12751 The new connective is translated as follows: 

\ / 




The correctness criterion hast to be changed such that in an iE-cycle we can walk through a red edge with an 




The two examples in (fT4"| fulfill the correctness criterion, while the two examples in (|75"|) do not. 

Note that we can define cut elimination as before, but we have to make sure that the arrows go in the right 
direction. Here is the new reduction rule that has to be added to the ones in (|4T|) and (|4"5]) : 




(76) 



With the same methods as in Section [2771 we can show the following theorem: 

3.7.1 Theorem Cut elimination for pomset logic proof nets is terminating, confluent, and preserves cor- 
rectness. 

You might already have wondered why for pomset logic we did not introduce the sequent calculus system 
before introducing the proof nets, as we did it with all other logics so far. The reason is simple. There is no 
sequent calculus system for pomset logic. 

This of course questions the label "logic" for the object we have here, if there is not even an ordinary 
deductive system for it. And what is the meaning of cut elimination in that respect? 

Fortunately, there is deep inference and the calculus of structures. The system shown in Figure [H] has been 
introduced by Guglielmi |Gug02] who called it SBV. For that system, we extend our language for formulas 
with another generator, the unit o. Furthermore, we consider formulas to be equivalent modulo the smallest 
congruence relation generated by the equations 

A>So = A = o^A A®o = i= o®4 A<io = A = o<A (77) 

23 The reason for this is that because of the self-duality of the new connective < the two units _L and 1 are identified. 
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S{o} _ S{A®A^} 

lJ - S{A ± ^A} ' T S{o\ 

S{A>sB} S{A®B} 
al S{BVA} ' JT S{B®A} 

S{A^(B^C)} S{A®(B®C)} 
a!l S{(A^B)*8C} aT S{{A®B)®C} 

S{A<(B<C)} 5P<BK} 
a 1 S{(A^B)<tC} " 1 S{A<i(B<iC)} 

S{A®{B^C)} 
5 S{(A®B)>%C} 

S{(A*gC)<\(B>8D)} S{{A®C)<(B®D)} 
qi S{{A<B)V{C<1D)} qT S{(A < B) ®(C < D)} 

Figure 14: System SBV in the calculus of structures 



The reason for this is to avoid to have five different 
derivation to be valid: 

A® B 
(A < o) ®(o < B) 
^ (A®o)<i(o®B) 

A<\B 
~ {A*go) <\(o^B) 
q \ (A<o)^(o<B) 
A *8B 

Here we implicitly use the "fake inference rule" 

_ S{B} 
S{A} 

where A — B according to the equations in (|77|) . Without it, we would need several more variants of qj. and 
q|, and the system would become rather big. The fragment of SBV without the up-rules (i.e., without the rules 
with the t in the name) is called BV. As usual in the calculus of structures, the up-fragment corresponds to the 
cut, and we have for BV the cut elimination theorem (proved by Guglielmi |Gug02| ): 

3.7.2 Theorem Let A be any poms et formula. Then, 

o o 
for every derivation SBV || there is a derivation BV || 

A A 

The proof uses the technique of splitting and works essentially the same way as we have sketched it for 
Theorem 12.7.31 The logic that is defined by BV is the first logic that definitely needs deep inference. Alwen 
Tiu |Tiu01[ [Tiu06 has shown that there cannot be a shallow inference system (in particular, no sequent calculus 
system) defining the logic of BV. 

We can apply the flow-graph method (see Section 12.41 to obtain proof nets from proofs in BV. Or, if you 
prefer, you can obtain two-sided proof nets from derivations in SBV. Everything that has been said in Section ^. 61 

24 Remember that for cyclic linear logic we had already three of them. 



versions of i j and it In Furthermore, we want the following 



A®B 

qT A<\B (78) 
ql A~^B 
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b*8b 



qJ 



6>S>(o<i(o>s>&- L )) 
b*3((a>$a ± ) <l(o'S'6- L )) 
b^(a<]o)>^(a ± ^b 2 -) 
b^a^(a ± -^b- 1 -) 

I 



i! 



b*3b 



u 



(b'Sb^) < o 
(6^6^) <l(a'S , a ± ) 

I 



fe>g(o<(o>S > & ± )) 
' 6>t?((a>S'a ± )<l(o'g6 ± )) 
q _ Vg(^<o)^ ± <J> ± ) 




6^6 



(fe'S'fe- 1 ) <o 




(JxA)^^ >V) 

4 




Figure 15: From BV to proof nets 



does also apply here. Figure [15] shows two small examples of proof nets obtained from BV derivations. They, 
in fact, correspond to the two RB-graphs in ([74| . 

The reason for mentioning all this is the following theorem: 

3.7.3 Theorem Let A and B be any pomset logic formulas. Then 

A o 
SBV II if and only if BV || (79) 

B A ± ^B 

and if these derivations exist, then they have the same proof net, and this proof net obeys the pomset logic 
correctness criterion, when written as RB-graph. 

Proof (Sketch): Let us start with the first part of the theorem which is easy, provided we have cut elimination: 
From 

A 

SBV I 

B 
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we can build 

o 

SBV [J 

A ± >9B 

Now we apply Theorem 13.7.21 to get 

o 

BV J (80) 
A X *8B 

The other direction is even easier. From ([50]) . we can directly build 

A 



A (go 
BV J] 
A®(A ± ^B) 

S (A®A ± )>VB 

it 

o>8B 



B 

Note that this part of the proof did not use the fact that we are speaking about BV. It in fact holds for any 
logical system in the calculus of structures, provided we have the switch rule and a cut elimination that preserves 
the flow-gra phEl 

Let us now come to the second more interesting and more difficult part or the theorem. There are two ways 
to show that every BV proof net obeys the pomset logic criterion. The first is to show that every rule in BV 
preserves the criterion (and that the unique net with o as conclusion is correct). This has been done already by 
Retore Ret99b|. The second way, which has been used in [Str03a, GS02] is based on the following claims: 

Claim 1: Let n > 1 and atoms oi, . . . , a n and formulas Ax, ... , A n be given, such that for all i G {1, . . . , n}, 
we have Ai = ®a,i + i or Ai — af- <\ai + \ (where we count indices modulo n). Then there is no 
derivation 

o 

BV J (81) 
Ai >9 ■ ■ • >8> A n 

For proving the claim we proceed by way of contradiction and by induction on n. We have to perform a 
case analysis how the rules of BV could be applied inside A\ *g ■ ■ ■ *g A n . We also need the concept of a quasi- 
subformula. We say that A is a quasi- sub formula of B, if A can be obtained from B by replacing some atom 
occurrences by o 



sav 




Claim 2: Let it be a pomset logic pre-proof net with conclusion B, and let A be a quasi-subformula of B such 
that whenever an atom occurrence is replaced by o, then also its mate (according to the linking in 
7r) is replaced by o. Then we have the following: 

o 

If BV 1 1 then BV 
B A 



This is easy to see because the proof of B remains valid if we replace pairs of atoms by o. 

Claim 3: Let tt be a pomset logic pre-proof net with conclusion B. Then it does not fulfill the pomset logic 
correctness criterion if and only if B has a quasi-subformula A\ >S? • • ■ *8 A n , where all Ai are as in 
Claim 1, and all pairs a^, are paired up in the linking of tt. 

Claims 1-3 together imply the result. □ 

25 Roughly speaking, this is the same as saying that the proofs in the logic form some sort of *-autonomous category. 
2B When A is a quasi-subformula of B, then the relation web (see Definition 12.5.181 of A is a subweb of the relation web of B. 
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3.7.4 Remark The Claim 3 in the proof above states a second correctness criterion for BV/pomset logic, 
which does not need RB-graphs, and which first appears in [Str03aj . Claims 1 and 2 in the proof above show 
that BV derivations obey this criterion. Proving Claim 3 then means showing that the two criteria are indeed 
equivalent. 

3.7.5 Exercise Complete the proof of the second part of Theorem (|3.7.3|) . i.e., show that every proof net 
coming from a BV derivation obeys the pomset logic correctness criterion. 

3.7.6 Open Research Problem Prove the converse. I.e., show that for every correct pomset logic proof 
net there is a BV derivation having it as flow graph. 

Solving this problem would finally (because of Tiu's result |Tiu06j ) show that it is indeed impossible to give 
a sequent calculus system for pomset logic. 

4 Intuitionistic logic 

We will not speak about intuitionistic logic in this course. But I will mention here some important facts related 
to the title of the lecture notes, because these facts have had a strong impact on the development of proof nets 
for classical logic that we will discuss in the next section. 

The inference rules in natural deduction for implication in intuitionistic logic 

T,Ah B Th A^ B A 

— +1 and — >E 

Th A^ B Th B 

are the same as the typing rules 

T,x. Ah u: B Thu:A->B Thv.A 

abs and app 

Th\x.u:A^B Thuv.B 

for the simply typed A-calculus. This is the basis for the so-called Curry-Howard-correspondence (also known 
as formulas-as-types-correspondence and proofs-as-programs-correspondence). It is also called "isomorphism" 
because the normalization in natural deduction [Pra65j does the same as /3-reduction in the A-calculuso If we 
add conjunction to the logic (or equivalently product types to the A-calculus) we can use the proofs in natural 
deduction (or equivalently A-terms) for specifying morphism in cartesian closed categories (short: CCCs). What 
makes things interesting is the fact that the identity forced on proofs by the notion of normalization in natural 
deduction (or equivalently the identity forced on A-terms by normalization^!) is exactly the same as the identity 
of morphism that is determined by the axioms of CCCs. For further details on this see LS86j. Of course, this 
simple observation has been extended to more expressive logics and larger type systems (e.g., System F |Gir72] . 
calculus of constructions [CH88] , . . . ) . 

Since there is already a well-understood canonical and bureaucracy-free presentation of proofs in intuitionistic 
logic, namely terms in the (simply) typed A-calculus, the concept of "proof nets for intuitionistic logic" is not well 
investigated. To my knowledge there are only two proposals in that direction. The first, by Lamarche |Lani94 
uses the encoding of intuitionistic logic into (intuitionistic) linear logic (the multiplicative exponential fragment). 
The second, by Horbach Hor06j, restricts a class of proof nets for classical logic (that we will discuss in the 
next section) to intuitionistic logic. Of course, this cannot be as simple as for IMLL~ (see Section 1575]) because 
classical logic is not a conservative extension of intuitionistic logic. 



5 Classical Logic 

It is surely very tempting to extend the beautiful connection between deductive system, A-calculus, and category 
theory from intuitionistic logic to classical logic. 

We get from intuitionistic logic to classical logic by adding the law of excluded middle (i.e., AV A), or 
equivalently, an involutive negation (i.e., A = A). Adding this to a Cartesian closed category ^ ', means adding 
a contravariant functor (— ) : ^ — ► ^ such that A = A and (A A B) = Av B where A V B = A=> B. However, if 

27 One could also argue that we have here just two different syntactic presentations of the same mathematical objects. 
28 /3-reduction, ry-expansion, and a-conversion 
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we do this we get a collapse: all proofs of the same formula are identified, which leads to a rather boring proof 
theory. This observation is due to Andre Joyal, and a detailed proof and discussion can be found in |LS86j and 
in the appendix of |Gir91j . 

We will not show the category theoretic proof of the collapse. But we will explain the phenomenon in terms 
of the sequent calculus (the argumentation is due to Yves Lafont [GLT891 Appendix B]). Suppose we have two 
proofs of the formula B in some sequent calculus system: 

h B and h B 

Then we can with the help of the rules weakening, contraction, and cut 



weak ■ 



h r 



T,A 



cont ■ 



hr,A,i 



cut ■ 



h T,A 



A, A 



h r, A 



form the following proof of B 




weak ■ 
cut ■ 



\-B,A 



weak ■ 




hA ± ,B 



(82) 



h B,B 



cont ■ 



h B 



If we eliminate the cut from this proof, we get either 

ni 

h B or 

weak ■ 



cont ■ 



h B,B 
h B 



weak • 
cont ■ 




(83) 



h B,B 
h B 



depending on a nondetcrministic choice. Now note that one can hardly find a reason why for any proof n, the 
two proofs 

x — JJ- 



weak ■ 
cont ■ 



h B 



and 



h B,B 
h B 




(84) 



should be distinguished. After all, duplicating a formula and immediately afterwards deleting one copy is not 
doing much. Also the laws of category theory tell us to identify the two. 

On the other hand, if we want the nice relationship between deductive system and category theory, we need 
a confluent cut elimination, which means we have to equate the two proofs in ()83[) . Consequently, by ([84]), we 
have to equate ni and II2. Since there was no initial condition on ni and D:2, we conclude that any two proofs 
of B must be equal. 

But the problem with weakening, which could in fact be solved by using mix (see Sections 13.61 and 15. 2p , is 
not the only one. We run into similar problems with the contraction rule. If we try to eliminate the cut from 



cont ■ 



ni 

\-T,A,A 



cut ■ 



\-T,A 



cont ■ 



n 2 

\- A,A,A 
\-A,A 



(85) 



hr,A 

we again have to make a nondeterministic choice. In the sections below, we will see a concrete example for this. 

There are several possibilities to cope with these problems. The easiest is to say that there cannot be any 
good proof theory for classical logic, and stop thinking about the problem^!. A more serious and more difficult 



9 and making sure that also other people do not think about the problem... 
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approach is of course to say that we have to drop some of the axioms, i.e., some of the equations that we would 
like to hold between proofs in classical logic. But which ones should go? 

There are now essentially two different approaches, and both have their advantages and disadvantages. 

1. The first says that the axioms of cartesian closed categories are essential and cannot be dispensed with. 
Instead, one sacrifices the duality between A and V. The motivation for this approach is that a proof 
system for classical logic can now be seen as an extension of the A-calculus and the notion of normalization 
does not change. With this approach one has a term calculus for proofs, namely Parigot's A^-calculus 
|Par92| and a denotational semantics :GirJJl , . An important aspect is the computational meaning in terms 
of continuations |Thi97| [SR98] . There is a well explored category theoretical axiomatization SelOlj , and, of 
course, a theory of proof nets [Lau99, Lau03j, which is based on the proof nets for MELL (see Section [3~Tj) . 
Although these proof nets are very important from the "normalization-as-computation" point of view, we 
will not discuss them here because at the current state of the art it is not clear how they can be used to 
identify proofs in various deductive systems for classical logic (sequent calculus, resolution, tableaux, . . . ). 

2. The second approach considers the perfect symmetry between A and V to be an essential facet of Boolean 
logic, that cannot be dispensed with. Consequently, the axioms of cartesian closed categories and the close 
relation to the A-calculus have to be sacrificed. It is much less clear than in the first approach, what the 
category theoretical axiomatization |DP04|. IFP04| ILS05a|. IMcK05| IStr05b| ILam06j should be, and how a 
theory of proof nets should look like. There are now two different versions in the literature, one following 
Ideology |2.2.1l (Section I5.1| l. and the other following Ideologv l2.3.1l (Sections HT21 and IQj) . 



5.1 Sequent calculus rule based proof nets 

Classical logic can be obtained from multiplicative linear logic by adding the rules of contraction and weakening. 
But for obvious reasons we will here change the notation and use the symbols A and V instead of ® and >S>. 
Negation will be denoted by 7 , instead of ■ . In other words, our formulas are generated by the syntax 

& srf \si \& \j & \& A& (86) 

Note that as before, we ignore the unit:Q and push negation to the atoms. Here are the inference rules in the 
sequent calculus: 

\-t,a hA, a 

id = cut ■ 



\-A,A hT,A 

hr,A,B,A hr hi,i,r 

exch weak cont (87) 

hr,B,4,A hA,r hA,r 

hA,B,T hT.A hB,A 

V ■ A- 



hiVB.r hr,AAB,A 

Note that there are various different sequent calculus systems for classical propositional logic, starting with 
the one by Gentzen .Gen34j. For a systematic treatment, the reader is referred to [TSOOj . The motivation for 
choosing the one in (|57|) is that it allows for the simplest notion for proof nets according to Ideology 12.2.11 
When we look at Ideology 12.3.11 and the notion of flow-graphs in the next sections, it does not matter which 
sequent system is taken as starting point. 

The rules in (|87p are essentially the same as the ones in ([T]) plus the ones for contraction and weakening. In 
order to obtain proof nets according to Ideology 12.2.11 we can therefore proceed as shown in Figures [1] and [TO] 

5.1.1 Exercise Give the translation of the rules in ([57)) into proof nets as it is done in Figures [Tl and [TO1 

Here is an example of a sequent calculus proof 

id — = — id — id — id — = — 

h b, b ha, a h a, a h b,b 

A U — id^^- id^^- A- 



\-bAa,a,b h b, b h b, b h b, a, a A b 

A A ■ 



h b A a, a A b, b, b h b, b, b A a, a A b 

cont = = cont ■ 



h 6 A a, a A 6, b h 6, 6 A a, aAb 
cut = = — = 

hbAfl, aAb, b A a, aAb 



30 Note, that in classical logic, this does not change the logic because we can pick a distinguished atom, say po, which may not 
appear in the formulas, and define t = po V po and f = po Apo- 
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and its translation into a proof net: 




b A a a Ab b b b Aa a Ab 




That this can easily be done has already been noted by Girard in the appendix of |Gir91| . where he also 
explained the problems with this approach that we will discuss below. In [Rob03j . Robinson carries out the 
details. He uses a two-sided version of the set of rules in ([87)) . but with what we learned in Section [2T6l it is an 
easy exercise to translate back and forth between the one- and two-sided version. 

Robinson also proves the soundness and completeness of the switching correctness criterion (see Defini- 
tion 12.5.41 and Theorem I2.5.5P . For the acyclicity condition this is not surprising since the rules in ([57)) are 
the same as in ([T]) (recall that contraction behaves as >§>). The connectedness condition is obtained simply by 
attaching a weakening somewhere, similarly as we did it with _L in Section 13.51 The price to pay is that now 
certain proofs are distinguished that should be identified according the rule-permutability- argument. To see a 
very simple example, consider the following three sequent calculus proofs (we systematically omit the exchange 
rule). 

id — = — id — = — id =- id =- 

h a, a h a, a h b, b h 6, b 

weak = — id — A = id — - — weak — (90) 

he, a, a h b, b h a, a A b, b h a, a h c, b, b 
A = wea k — A = 

h c, a, a A b, b h c, a, a Ab,b h c, a, a A b, b 

They differ from each other only via some trivial rule permutation, and should therefore be identified. But 
according to [Rob03 they can be translated into five different proof nets. Two of them are shown below: 




c a a Ab 



and 
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5.1.2 Exercise What are the other three proof nets corresponding to (|90| ? Compare the nets with the ones 
in Figure [T3l 

Let us now come to cut elimination. We have already seen in the introductory part of Section [5j that there 
is a problem with weakening. The short discussion in Section 13.11 suggests that there might also be a problem 
with contraction. Observe that in Section l37T| the contraction rule could appear only on one side of the cut, 
never at both sides at the same time (because only ?-formulas could be contracted, never [-formulas). This is 
the reason why in the end we get confluence of cut elimination for MELL" proof nets. However, for classical 
logic the situation is different. Contraction can appear on both sides of the cut, as it is shown in the example 
in l|88p and (j59"| . For typesetting reasons, let us use the more compact notation (as we also did in Section |2~5)) : 




baabbbbbbaab 



\/ \/ \/ \/ \/ V <■» 

A A cont cont A A 




Let us stress that and are only different notations for the same proof net. Note that we have 
here an example for the general case in (|85[) . If we want to eliminate the cut from (f9"3")l , we have to make a 
nondetcrministic choice, which subproof we duplicate. As outcome we get either 




cont cont A A 



or 




A A cont cont 



In the appendix of |Gir91j . Girard argues that for this reason it is impossible to have a confluent notion 
of cut elimination for proof nets for classical logic. Of course, his argumentation is valid only for proof nets 
following Ideology 12.2. II 

5.1.3 Exercise Show that ([94]) and ([95]) obey the switching criterion, and give the sequent proofs corre- 
sponding to (J94J) and ([95]) . 

Although there is no confluent cut elimination, Fuhrmann and Pym |FP04| managed to give a category 
theoretical axiomatization for the proof identifications made by these proof nets. This could be done because 
the authors dropped the "equation" 

cut elimination = arrow composition in the category of proofs 

and added an order enrichment instead. They defined for two proofs /, g : A — > B that f =4 g iS f reduces to g 
via cut elimination. See |McK05j for relating this to the calculus of structures. 
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weak • 
A' 



h a, a 
h a, a, a 



h a, a 



weak ■ 



h a, a 



ha.o.o 



h a, a A a, a, a 



5 h a, a, a A a, a A a, a, a 



exch 
cont 3 



h a, a, a A a, a A a, a, a 




(simple) a a a a 

\ / 
A 



a a a a (extended) 

A 



Figure 16: From sequent calculus to classical logic proof nets via flow graphs 



5.2 Flow graph based proof nets (simple version) 

In the previous section we have seen what happens if we naively carry the approach of Section 12.21 to classical 
logic. Now we are going to see what happens if we naively carry the approach of Section |2~31 to classical logic. 
We can define a pre-proof net as in Definition ^. 5. 1[ but now the identity links do not provide a perfect matching 
for the set of leaves of the sequent forest. It can happen that some atoms have no mate, i.e., live celibate, and 
that some atoms have more than one mate, i.e., live polygamous. It could even happen that there are two or 
more identity links between a pair of atoms, as the example (on the right) in Figure [TBI shows. This example 
also shows that we can now completely forget about the correctness criteria that we have seen in Section 12.51 
But most importantly, this example shows that for classical logic it makes a huge difference whether we follow 
Ideologv l2.2.1l or Ideology |2.3.1l to obtain proof nets. This also means, that the term "proof net" should be used 
with care, because it is not necessarily clear what a proof net for classical logic actually is. 

Let us, for the time being, restrict ourselves to those nets that have at most one identity link between any 
pair of atoms, and call them simple prenets: 

5.2.1 Definition A simple prenet is a sequent forest T, possibly with cuts, together with a symmetric, 
irreflexive binary relation P on its set of leaves, such that whenever two atom occurrences are related by P then 
they must be dual to each other. We will use the notation P \>T. 
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As in Section [2~5l we have to treat cuts as special formulas (see page [19]). 

In the left of Figure [16] we have shown an example how to translate a sequent calculus proof into a simple 
prenet. We draw the flow-graph as we did in Section [2731 and forget how often a pair of atoms is connected to 
each other. Here is an example of a simple prenet with cut. It is the one obtained from 




(96) 



We will call a simple prenet sequentializable if it can be obtained via the flow-graph method from the sequent 
calculus system in ([87]) extended by the mix-rule 

h r h a 



r,A 



5.2.2 Exercise Draw the simple prenets that are obtained from the sequent calculus proofs corresponding 
to the proof nets in (|94|) and ([95]) . Hint: You can do this exercise without doing Exercise 1 5. 1.31 

We are now going to define a correctness criterion for simple prenets. 

5.2.3 Definition Let T be a sequent. A conjunctive pruning of V is the subforest obtained V by deleting 
one of the two immediate subformulas for every A and for every cut. Let 7r = P \> T be a simple prenet. we call 
the prenet it' = P' [> V a conjunctive pruning of tt if V is a conjunctive pruning of T and P' is the restriction 
of P to (the set of leaves of) r'H3 



Here are two examples for conjunctive primings of ([96]): 




and 




b b 



A A 

5.2.4 Exercise How many others are there? 



A 



5.2.5 Definition A simple prenet P>T is called correct (or, obeys the pruning condition, if every conjunctive 
pruning P' > T' of n contains at least one identity link, i.e., P' is not empty. 

Clearly, the example in (|96|) is correct. Here is an example, which is not correct, because there is a pruning, 
in which all links disappear: 




A A A A 

Interestingly, also in the correctness criterion given by Hughes and van Glabbeek in [HvG03] for MALL" 
(see Section I3.2[) the pruning condition plays a role. 



31 Strictly speaking, jr' is not a simple prenet because V is not a sequent because every A in T' is unary. For this reason tt' is 
not a subprenet in the sense of Definition 12.5.71 
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5.2.6 Theorem A simple prenet it is correct, if and only if it is sequentializable. 



Proof: First, observe that the id-rule produces correct prenets and that all rules in (|87|) . including mix, preserve 
correctness. For the rules V, exch, weak, cont, and mix, this is obvious. Let us show it here for the A-rule. Let 
7Ti and 7T2 be the simple prenets obtained from 





and 

respectively. Let us assume by induction hypothesis that they are correct, and let 7r be the simple prenet 
obtained from 



A- 



F, A hS,A 
\- T, A A B, A 



Let 7r' be a conjunctive pruning of tt. If it removes B from A A B, then ir' contains a link because ~k\ is correct, 
and if tt' removes A, then it must contain a link because tt2 is correct. For the cut-rule it is similar. 

Conversely, let it = P > A be a correct prenet. we will proceed by induction on the size of A (that is, the 
number of A, V, atoms, and cuts appearing in it) to construct a a corresponding sequent proof using the rules 
in ([87)) plus mix. 



• If A contains a formula A V B, then we can apply the V-rule and proceed by induction hypothesis. 

• If A contains a formula A A B, i.e., A = r, A A B, then we can form three correct simple prenets 
tti = P' O T, A, and ir 2 = P" > Y, B, and n 3 = P > T, A, B, where P' and P" are the restrictions of P to 
r, A and T, B, respectively. Since 7Ti, and 7T2, and are all correct, we get three sequent calculus proofs 



n 3 

hr,AB 





from which we can form the following proof (we omit the instances of exch) 




(97) 



cont • 



\- T,T 7 T, A A B, A A B 



cont ■ 



hT,AAB 

which translates into ir. Let us make three remarks about that case: 

— Note that we made crucial use of the fact that we forget how often an identity link is used inside the 
proof. 

— The proof II3 is needed for keeping the links that cross A A B. If there is in tt no link between an 
atom in A and an atom in B, then we do not need II3 and could replace (|9T|) by 




cont ■ 



hr,r,vlAB 



cont ■ 



hfJAB 
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— For dealing with cuts we proceed similarly. But to be formally precise, we need to allow to apply the 
contraction rule not only to formulas in the sequent, but also to cuts. 

• If A = r, A such that no link is coming out of A, then we apply the weakening rule and proceed by 
induction hypothesis. 

• The only remaining case is where all formulas in A are atoms. Then our sequent calculus proof is obtained 
by a sufficient number of instances of id, cont, exch, and mix. □ 

We will use the term simple proof net for the correct (i.e., sequentializable) simple prenets. They have 
been introduced in |LS05b| . However, the idea of looking at paired atom occurrences in classical logic is much 
older. In |And76j Andrews applied the "flow-graph" method to resolution proofs and called the result matings. 
He had, in fact, exactly the same correctness criterion as we have seen above. Independently, Bibel |Bib81j 
investigated the same objects and called them connection proofs. Also the term matrix proofs is used because 
formulas have been written in form of matrices. 

However, both authors, Andrews and Bibel, did not allow the linking of two atoms that are connected in the 
tree by a conjunctional From the viewpoint of provability/correctness, this perfectly makes sense. Note that 
such links (we have an example in Figure [TB|) disappear in every conjunctive pruning. So, why having them in 
the first place? 

The reason is cut elimination, i.e., the composition of proofs. We define it in the same way as for MLL~ in 
Section 12.71 In the case of a cut on a compound formula, we do the obvious thing: 



ABBA 



A 




(98) 



To see that this preserves correctness, note that a conjunctive pruning of the cut on the left yields either A or 
B or Bvi, and a conjunctive pruning of the cut on the right yields either A, B or A, B or A, B or A, B. Hence, 
every conjunctive pruning of the reduced simple prenet contains a conjunctive pruning of the non-reduced simple 
prenet. Therefore it most contain at least one link. 

For the cut reduction on atomic cuts, we have to be careful, since the atoms can be connected to many other 
atoms (or no other atoms). Instead of simply having: 



the reduction looks as follows: 




a a 




a a 



If one of the two cut atoms is celibate, no link remains: 




If the two cut atoms are linked together, then this link is ignored in the reduct ion (and , of course, removed with 
the cut): 





a a 



The atomic cut reduction also preserves correctness. If we could in the reduced simple prenet construct a 
conjunctive pruning that does not contain an identity link, then the same pruning would not contain a link in 
the non-reduced net, where one cut atom is always removed. 



32 That means they are connected by a red edge in the relation web, see Definition 12.5.181 
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5.2.7 Theorem Cut elimination for simple proof nets preserves correctness, is confluent, and terminating. 



Proof: Preservation of correctness has already been shown above. Termination is obvious since each step 
reduces the size of the simple proof net. For confluence we only need to consider atomic cuts since the reduction 
of compound cuts does not create critical pairs. Let it be a simple proof net with atomic cuts and let ir' be 
the result of reducing these atomic cuts. Then there is a link between two dual atom occurrences a and a in 
7r', if either that link is already present in n, or there is an alternating link-cut-link-cut-. . .-link path in n that 
connects a and a. This is independent from the order in which the atomic cuts are reduces. □ 

The natural question that arises now is: How does this confluent cut elimination relate to the non-confluent 
cut elimination in the sequent calculus? 

Let us look again at the two problematic cases (|82|) and ([85]) . The problem with weakening (|82[) can easily 
be solved by using the mix-rule: 



h r 

wea k wea k 




cut ■ 



hr,A 





mix - 



h r, A 



h r, a 



Both subproofs IT and I±2 are kept in the reduced net. With the help of mix, this can also be done in the 
sequent calculus, and in simple proof nets it is done in the same way. 

For the contraction case ([85]) the situation is less obvious. Consider again the simple proof net in ([96|) . which 
corresponds to the sequent calculus proof in (J55J) . If we apply the cut elimination for simple proof nets, we 
obtain the following result: 



(99) 



A A A A 

If you did Exercise 15 . 2 .21 you will notice that this is exactly the simple proof net obtained from the sequent 
proofs corresponding to (|94|) and (|95|) . However, let us emphasize that this correspondence also makes crucial 
use of the fact that we deliberately forget how often an identity link is used in the proof. If we kept this 
information, the proofs in (|94l) and (|95|) would be represented by 





and 




respectively. See |LS05b] for further details. 

It should be clear that simple proof nets are not particularly connected to the sequent calculus. We can 
obtain them in the same way from proofs presented in the calculus of structures. Figure [17] shows a deductive 
system for classical logic in the calculus of structures. It is a (unit-free) variation of system SKS, presented 
in [BTOlj . The rules are the same as the ones for MLL~ in Figure [5] As in the sequent calculus, we add the rules 
for contraction, weakening, and mix. We also add the m-rule, called medial. As it is the case with mix, it is is 
not necessary from the viewpoint of provability, but its presence gives the system a much nicer proof-theoretic 
behavior. See [BT011 IBru031 IStr05bl ILam06j for further details. 

Most of the theory on the relation between proof nets, sequent calculus and calculus of structures, that has 
been developed in Section [5] can be ported easily to classical logic. In particular, we can obtain Theorcm l2.6.2l 
and the commutativity of (|49p , provided we restrict ourselves to simple proof nets. 



5.2.8 Open Research Problem Find a category theoretical axiomatization that generates the same iden- 
tification for proofs as it is done by simple proof nets for classical logic. (This is meant in the same sense as 
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Figure 17: A system for classical logic in the calculus of structures 



*-autonomous categories provide the axiomatization for proof nets for MLL, and cartesian closed categories for 
typed A-terms.) 

There is already preliminary research in this direction in |LS05bl [LS05a|, [Str05a, Lam06, Str05b] . but there 
is still no satisfactory solution. 

5.3 Flow graph based proof nets (extended version) 

The first problem with simple proof nets is that they are too simple. When speaking about the identity of 
proofs one should also take into account the size of proofs. But simple proof nets have a size at most quadratic 
in the size of the conclusion sequent. This means they are not able to observe any kind of complexity, not even 
the exponential blow-up related to cut elimination. 

The second problem with simple proof nets is that they are too simple. They omit too much important 
information about the proof. Checking their correctness takes exponential time, which is not faster than trying 
to prove the conclusion from scratch. But checking a proof should be a feasible task, taking only linear time in 
the size of the proof. 

A naive solution could be to simply keep track of how often an identity link is used in the proof, i.e., allow 
more than one link between a pair of dual atoms, as shown on the right in Figure 1161 Let us call these new 
objects extended prenets. 

The first problem we encounter now is not only to define what correctness means, but also, what sequential- 
izable means. To see the difficulty, consider again the simple proof net in (|99|) . Now, all of the sudden, there is 
no sequent calculus proof that has it a flow-graph. However, we can find a proof in the calculus of structures, 
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in the system shown in Figure [T7l 




(Fa (jfVs) a I) v (| a (/v*S) A) 



(J A A) v (a A J) V (b A 4) v (a A b) 



bA(aVa)Ab) 
b A a) V (a A b) 




(jA<i)V(aAi)V(iA4)V(aAi) 



This means that for extended prenets, it depends on the chosen deductive system whether a given prenet is 
sequentializable or not. 

5.3.1 Open Research Problem Find a good notion of "sequentializability" and a corresponding correct- 
ness criterion for extended prenets. 



The second, more serious problem comes with cut elimination. In LS05bJ it is explained, how cut elimination 
for extended prenets has to look like. For a cut on compound formulas it is the same as for simple proof nets. 
But for an atomic cut, we now have to multiply the number of edges. For example 



a a a a 



reduces to 




If there are already some links between the remaining pair of atoms, then these links have to be added. For 
example 



a a a a 



reduces to 




a a 



Of course, we cannot say whether this preserves correctness, since we do not know what correctness means. But 
the good news is that cut reduction is still terminating, and that we can get an exponential blow-up in the size 
of the proof when doing cut elimination. 

The bad news is that cut elimination is no longer confluent. This has already been observed in [LS05bj . The 
following example is taken from [Hor06 . Depending on which cut in 

a a a a a a 



we reduce first, we get either 




If we reduce the remaining cut, we get 

(s-^ or y-N 

a a a a 

respectively. The basic reason of this non-confluence is that we do not have the acyclicity condition anymore, 
and it depends on the order of the cut reductions how often "the flow-graph runs through a cycle" . In |Hor06] , 
Horbach proposes a way of keeping track of the cycles in order to get confluence for cut elimination on extended 
prenets representing intuitionistic proofs. 
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An alternative possible solution could be to redefine cut elimination such that no longer all atomic cuts are 
reduced. In [Str05a, StrOSb it is shown how this can be done such that we get a confluent cut elimination which 
corresponds to composition of derivations in the calculus of structures: 



B 



C 



A 

C 



Which still allows to keep the equation 

cut elimination = arrow composition in the category of proofs 

But then cut elimination for extended prenets does no longer correspond to cut elimination in the sequent 
calculus. That it is indeed impossible to make the diagram (j4"5|) commute for the sequent calculus and extended 
prenets has already been shown with the example in (|99p in the previous section. But it is not known whether 
we can make it commute for the calculus of structures. 

5.3.2 Open Research Problem Find for the calculus of structures (possibly for the system in Figure [TT)) 
a cut elimination procedure, possibly based on splitting (as done in the proof of Theorem I2.7.3P such that it 
behaves in the same way as the cut elimination for extended prenets, i.e., such that diagram (|49p commutes. 

In any case, what has been said in this section shows that for classical logic the answer to the Big Ques- 
tion [2TT79] on page [39] is no longer an obvious yes. In fact, the answer might be No! 

5.3.3 Open Research Problem Make a nice theory out of this mess. 
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